How does Java Card protect itself against SPA, DPA, etc?

The Java Card specification doesn't deal with smart card attacks. Card issuers have to make sure that their Java Card implementation is immune (or at least very resistant) to all well-known smart cards attacks like timing attacks, SPA, DPA or DFA.