A Sound Framework for Untrusted Verification-Condition Generators

  • Authors:
  • George C. Necula;Robert R. Schneck

  • Affiliations:
  • -;-

  • Venue:
  • LICS '03 Proceedings of the 18th Annual IEEE Symposium on Logic in Computer Science
  • Year:
  • 2003

Quantified Score

Hi-index 0.00

Visualization

Abstract

We propose a framework called configurable proof-carryingcode, which allows the untrusted producer of mobilecode to provide the bulk of the code verifier used bya code receiver to check the safety of the received code.The resulting system is both more flexible and also moretrustworthy than a standard proof-carrying code system,because only a small part of the verifier needs to be trusted,while the remaining part can be configured freely to suit thesafety policy on one hand, and the structure of the mobilecode on the other hand.In this paper we describe formally the protocol that theuntrusted verifier must follow in the interaction with thetrusted infrastructure. We present a proof of the soundnessof the system, and we give preliminary evidence that the architectureis expressive enough to delegate to the untrustedverifier even the handling of loop invariants, indirect jumpsand calling conventions.