A Formal Model of Memory Peculiarities for the Verification of Low-Level Operating-System Code

Authors:
Hendrik Tews;Tjark Weber;Marcus Völp
Affiliations:
Institute for Computing and Information Sciences, Radboud Universiteit Nijmegen, The Netherlands;Institute for Computing and Information Sciences, Radboud Universiteit Nijmegen, The Netherlands;Institute for System Architecture, Technische Universität Dresden, Germany
Venue:
Electronic Notes in Theoretical Computer Science (ENTCS)
Year:
2008

Citing 3
Cited 4

PVS: Combining Specification, Proof Checking, and Model Checking

CAV '96 Proceedings of the 8th International Conference on Computer Aided Verification
Types, bytes, and separation logic

Proceedings of the 34th annual ACM SIGPLAN-SIGACT symposium on Principles of programming languages
Putting it all together – Formal verification of the VAMP

International Journal on Software Tools for Technology Transfer (STTT) - A View from Formal Methods 2003 (pp 301-354); Special Section on Recent Advances in Hardware Verification (pp 355-447)

Formal Memory Models for the Verification of Low-Level Operating-System Code

Journal of Automated Reasoning
seL4: formal verification of an OS kernel

Proceedings of the ACM SIGOPS 22nd symposium on Operating systems principles
Code optimizations using formally verified properties

Proceedings of the 2013 ACM SIGPLAN international conference on Object oriented programming systems languages & applications
Comprehensive formal verification of an OS microkernel

ACM Transactions on Computer Systems (TOCS)

Quantified Score

Hi-index	0.00

Visualization

Abstract

This paper presents our solutions to some problems we encountered in an ongoing attempt to verify the micro-hypervisor currently developed within the Robin project. The problems that we discuss are (1) efficient automatic reasoning for type-correct programs in virtual memory, and (2) modeling memory-mapped devices with alignment requirements. The discussed solutions are integrated in our verification environment for operating-system kernels in the interactive theorem prover PVS. This verification environment will ultimately be used for the verification of the Robin micro-hypervisor. As a proof of concept we include an example verification of a very simple piece of code in our environment.