SAW: the software analysis workbench

  • Authors:
  • Kyle Carter;Adam Foltzer;Joe Hendrix;Brian Huffman;Aaron Tomb

  • Affiliations:
  • Galois, Inc, Portland, OR, USA;Galois, Inc, Portland, OR, USA;Galois, Inc, Portland, OR, USA;Galois, Inc, Portland, OR, USA;Galois, Inc, Portland, OR, USA

  • Venue:
  • Proceedings of the 2013 ACM SIGAda annual conference on High integrity language technology
  • Year:
  • 2013

Quantified Score

Hi-index 0.00

Visualization

Abstract

Galois has developed a suite of symbolic simulation and formal analysis tools, collectively called the Software Analysis Workbench (SAW). SAW provides security analysts and engineers with the ability to generate formal models from C and Java programs and prove properties of those programs using several automated verification tools. SAW is primarily used to verify the correctness of cryptographic implementations, and is able to import specifications written in Cryptol, a language developed by Galois for specifying cryptographic primitives. In this short paper, we describe the main components of SAW. We then given an overview of the cryptographic implementations that have been verified.