On trojan horses of thompson-goerigk-type, their generation, intrusion, detection and prevention

Authors:
Hans Langmaack
Affiliations:
Institut für Informatik der, Christian-Albrechts-Universität zu Kiel, Kiel, Germany
Venue:
Concurrency, Compositionality, and Correctness
Year:
2010

Citing 14
Cited 0

Advances in software inspections

IEEE Transactions on Software Engineering
Toward compiler implementation correctness proofs

ACM Transactions on Programming Languages and Systems (TOPLAS)
Common LISP: the language

Common LISP: the language
Piton: a mechanically verified assembly-level language

Piton: a mechanically verified assembly-level language
Reflections on trusting trust

Communications of the ACM
Compiler verification revisited

Computer-Aided reasoning
A Discipline of Programming

A Discipline of Programming
The verifying compiler: A grand challenge for computing research

Journal of the ACM (JACM)
Verification of Compilers

Correct System Design, Recent Insight and Advances, (to Hans Langmaack on the occasion of his retirement from his professorship at the University of Kiel)
Contribution to Goodenough's and Gerhart's Theory of Software Testing and Verification: Relation between Strong Compiler Test and Compiler Implementation Verification

Foundations of Computer Science: Potential - Theory - Cognition, to Wilfried Brauer on the occasion of his sixtieth birthday
Software Development in PVS Using Generic Development Steps

Selected Papers from the International Seminar on Generic Programming
Rigorous Compiler Implementation Correctness: How to Prove the Real Thing Correct

FM-Trends 98 Proceedings of the International Workshop on Current Trends in Applied Formal Method: Applied Formal Methods
A Mechanically Verified Compiling Specification for a Lisp Compiler

FST TCS '01 Proceedings of the 21st Conference on Foundations of Software Technology and Theoretical Computer Science
What Level of Mathematical Reasoning can Computer Science Demand of a Software Implementer?

Electronic Notes in Theoretical Computer Science (ENTCS)

Quantified Score

Hi-index	0.00

Visualization

Abstract

Trojan horses of Thompson-Goerigk-type are intended software errors very hidden in machine level compiler implementations although the latter have successfully passed Wirth's strong compiler bootstrapping test and there have been done rigorous verification both of compiling specification and of high level compiler implementation. Thompson demonstrated these errors in 1984. This essay describes Goerigk's contributions on how to generate, intrude, detect and prevent these most intricate errors which can even pass compiler certification test suites undetected. Target code inspection therefore is necessary. However, a full inspection usually is not feasible. Main research result described is how to slash down the amount of inspection necessary, while still getting a provably correct compiler. Project Verifix demonstrated this approach on a fully verified, realistic compiler for a realistic high level language.