Research Group Leader
 |
Gernot Heiser Scientia Professor; John Lions Chair |
Gernot's main research interests are in operating systems, especially microkernel-based systems, and their use in embedded/cyber-physical systems, OS security and robustness issues, general cyber-security, energy/power management, real-time systems, virtualization and architectural support for operating systems. |
|
Academic Staff
 |
Carroll Morgan Emeritus Professor |
Carroll's research is on formal methods, semantics, security, program correctness and probability. |
|
 |
Craig McLaughlin Research Associate |
Craig's research interests include type theory, logic, programming languages, compilers, and formal verification. He presently works on a formal security framework for a provably secure operating system |
|
 |
Kevin Elphinstone Associate Professor |
Kevin works on operating system microkernels and the infrastructure required to support larger systems upon them. His current focus includes secure embedded operating systems suitable for formal verification, and for being the basis of secure systems for embedded devices. He also has interests in componentised operating systems, operating systems in general, security, real-time systems, computer architecture as it pertains to operating systems, and virtualisation. |
|
 |
Rob Sison Senior Research Associate |
Rob is a postdoctoral researcher who is broadly interested in discovering how best to design and construct software systems with formally proved functional-correctness and security properties at scale. |
|
 |
Thomas Sewell Lecturer |
Thomas is interested in software verification, programming languages and operating systems. He has contributed extensively to major software verification projects such as the seL4 verified microkernel and the CakeML verified compiler. |
|
Research and Engineering Leaders
 |
Ivan Velickovic Senior OS Engineer |
Ivan is working on the seL4 Microkit, seL4 Device Driver Framework, virtualisation on seL4, and LionsOS. Most of his time is spent mentoring and helping others in the team towards building a functional and usable LionsOS. |
|
 |
Miki Tanaka Senior Proof Engineer |
Miki is interested in formal verification techniques and their application to software systems, and broadly proof engineering as a discipline. Miki has contributed to the verification of architecture porting for seL4 and also the verification of the seL4 MCS extensions as the technical lead. Miki is currently involved in a project for device driver verification using the Pancake language (based on cakeML/HOL4). |
|
 |
Peter Chubb Senior Systems Consultant |
Peter's research interests include operating system abstractions for, intra alia, storage, scheduling, memory management, and locking. He is also interested in capacity planning, and in systems performance measurement and optimisation. His main expertise is in Unix and Linux kernels, and low level system support built on these. He also maintains the Trustworthy Systems website and internal infrastructure. |
|
Engineers and Research Assistants
 |
Alwin Joshy OS Engineer |
Alwin is working on fast paths in seL4 and on a secure multi-server OS on seL4 |
|
 |
Ben Nott Research Assistant |
Ben has deep research interests in formal methods and metamathemtics. Ben is working on Pancake language semantics and program verification. |
|
 |
Bill Nguyen OS Engineer |
Bill is involved in low-level work for the sDDF and LionsOS. |
|
 |
Cheng Li Research Assistant |
Cheng is working on adding persistence to seL4 components. This involves implementing filesystems and block device drivers on top of LionsOS. |
|
 |
Courtney Darville OS Engineer |
Courtney works on secure multi-server operating system design, and on applying model checking to verify inter-component communication in a highly modular seL4-based OS. |
|
 |
James Archer OS Engineer |
James is working to improve the locking in multicore seL4. |
|
 |
Jingyao Zhou OS Engineer |
Jingyao is interested in real-time operating systems and hardware. She presently works on device virtualisation for seL4 |
|
 |
Julia Broady OS Engineer |
Julia is working on LionsOS and is interested in the development of secure systems. |
|
 |
Krishnan Winter OS Engineer |
Krishnan is working on OS development infrastructure, especially support for profiling. |
|
 |
Simon Sillitoe OS Engineer |
Simon is investigating worst case execution time for seL4 on RISC-V and learning about verification. |
|
 |
Siyu Qiu Research Assistant |
Annie is working on making cva6 cpu work on the Genesys2 board. |
|
 |
Szymon Duchniewicz OS Engineer |
Szymon is interested in memory management, secure operating systems. |
|
 |
Terry Bai OS Engineer |
Terry is doing low-level sDDF and LionsOS work, and is currently looking at clock initialisation on a variety of platforms. |
|
|
Research Students
 |
Dao Le Masters Student |
Supervised by
Gernot Heiser
|
Dao is working on the decompilation-into-logic framework for Pancake. |
|
 |
Guangtao Zhu Masters Student |
Supervised by
Gernot Heiser
|
Guangtao is working on secure, high-performance microservices on seL4 |
|
 |
Junming Zhao PhD Student |
Supervised by
Gernot Heiser
|
Junming is interested in memory management and formal methods. She is currently working on verifiying a Pancake ethernet driver using SMT solvers. |
|
 |
Kevin Tran PhD Student |
Supervised by
Rob Sison
|
Kevin's research is on creating a framework for reasoning about concurrent programs, with the ultimate goal of verifying multicore seL4. |
|
 |
Nils Wistoff Visiting Fellow; PhD Student, ETH Zurich |
Supervised by
Gernot Heiser
|
Nils is a visiting PhD student from the Digital Circuits and Systems Group of ETH Zurich. His research interests include application-class processor design and protection against timing channels through HW/SW co-design. |
|
Coursework Students
 |
Charran Kethees Honours Thesis Student |
Supervised by
Rob Sison
|
Charran is working on the development and verification of Hoare Logic over interaction trees. |
|
 |
Chirag Sawlani Honours Thesis Student |
Supervised by
Peter Chubb
|
Chirag is working on a secure file system for SDcard storage. |
|
|
Daniel Field Honours Thesis Student |
Supervised by
Gernot Heiser
|
Daniel is interested in Drivers in the sDDF framework. |
|
 |
Halogen Truong Honours Thesis Student |
Supervised by
Thomas Sewell
|
Halogen is interested in compilers, programming languages and low level programming. They are working on improving usability and safety for Pancake. |
|
 |
James Milosavljevic Honours Thesis Student |
Supervised by
Gernot Heiser
|
James is a 4th year undergraduate student completing a degree in computer engineering. He is currently working on a project to enable booting virtual machines off disk. |
|
|
James Treloar Honours Thesis Student |
Supervised by
Gernot Heiser
|
James is interested in operating systems. He is also interested in FPGA research. |
|
 |
Joong Do Chiang Honours Thesis Student |
Supervised by
Gernot Heiser
|
Joong Do (JD) is a thesis student working on designing and developing an ARINC 653-compliant userspace scheduler on seL4 MCS using the Microkit. He is interested in low-level systems development and software verification, and their intersection. |
|
 |
Kurt Wu Masters Student |
Supervised by
Rob Sison
|
Kurt is working on verification of sDDF components under weak memory models. He is interested in parallel computing and formal verification. |
|
 |
Matthew Rossouw Honours Thesis Student |
Supervised by
Peter Chubb
|
Matt works on sDDF/LionsOS drivers, and various networking, hardware and FPGA projects. Matt's honours thesis is on studying driver dataflow dynamics in the sDDF. |
|
 |
Michael Mospan Honours Thesis Student |
Supervised by
Peter Chubb
|
Michael is a 3rd year Advanced Computer Science student interested in Operating Systems development. He is currently working on a project to create a Linux library with the goal of emulating the seL4 Microkit. |
|
|
Richard Shen Honours Thesis Student |
Supervised by
Gernot Heiser
|
Richard is working on evaluating programming languages for verified LionsOS components. |
|
 |
Thomas Liang Honours Thesis Student |
Supervised by
Rob Sison
|
Thomas is working on the verification of the seL4 microkernel. His honours thesis is about eliminating microarchitectural timing channels. |
|
Student Interns
 |
Adam Stucci Student Intern |
Supervised by
Miki Tanaka
|
Adam is interested in programming language theory and is working on adding continuations to Pancake. |
|
 |
Anton Ragusa Student Intern |
Supervised by
Ivan Velickovic
|
Anton is working on the specification of an sDDF driver interface and implementation. |
|
|
Freya D'Mello Student Intern |
Supervised by
Ivan Velickovic
|
Freya is working on a research internship to establish multikernel support and inter-kernel communication in the Microkit. |
|
 |
Liam Murphy Student Intern |
Supervised by
Gernot Heiser
|
Liam is working on formalising device controllers and verifying their drivers against that interface. |
|
 |
Mingyuan Xu Student Intern |
Supervised by
Alwin Joshy
|
Mingyuan is working on writing an IDL compiler for a general-purpose OS written with the seL4 microkernel. |
|
 |
Ronald Chiang Student Intern |
Supervised by
Miki Tanaka
|
Ronald is working on connecting interaction trees and state machines for Pancake device drivers. |
|
 |
Thomas Qu Student Intern |
Supervised by
Johannes Åman Pohjola
|
Thomas Qu is interested in type theory and software verification. |
|
 |
Tristan Clinton-Muehr Student Intern |
Supervised by
Gernot Heiser
|
Tristan is looking into adding new device classes to the seL4 Device Driver Framework. |
|
|
Udit Samant Student Intern |
Supervised by
Alwin Joshy
|
Udit is working on dynamic features in sDDF |
|
 |
Uzman Zawahir Student Intern |
Supervised by
Peter Chubb
|
Uzman is working on adding persistence support to seL4 microkit apps. |
|
 |
Yifei Zhan Student Intern |
Supervised by
Ivan Velickovic
|
Yifei is attempting to improve the performance of the LionsOS Virtual Machine monitor |
|
Support
 |
Christopher Irving System Administrator |
Christopher is training as a system administrator to maintain the machines and infrastructure of Trustworthy Systems. |
|
 |
Tessa Lunney Administrator |
Tessa works part-time as the Administrative Officer, managing the office. She works Mondays, Thursdays, and Fridays. |
|
Affiliates
 |
Corey Lewis Visiting Fellow; Engineer at Proofcraft |
Corey was a senior proof engineer and the lead engineer for verifying multi-core seL4. During his time at TS he has been involved in a wide variety of projects to do with seL4. These include developing the original CapDL translation tools, helping complete the information flow proofs, and contributing to the verification of the seL4 MCS extensions. His research interests include formal methods, functional programming, and program verification. Corey now works at Proofcraft. |
|
 |
Gerwin Klein Adjunct Professor; Founder and Chief Scientist at Proofcraft |
Gerwin's research interest is in Formal Methods, more specifically in interactive theorem proving, software verification, semantics of programming languages, and in the emerging field of proof engineering. Generally, he wants software systems to be dependable, and thinks that formal specification and proof can make a significant contribution towards that goal. |
|
 |
Johannes Åman Pohjola Adjunct Senior Lecturer |
Johannes is interested in beauty and truth. He works on interactive theorem proving, program verification and concurrency theory, specifically for the Pancake language |
|
 |
June Andronick Adjunct Professor; Founder and CEO at Proofcraft |
June had joined the Trustworthy Systems research group in 2008 (in NICTA), and led the group from end of 2016 to end of 2020. Her main research interest is in formal verification and certification of software systems, more precisely in formal proof of correctness and security properties of programs using interactive theorem proving, as well as concurrency reasoning, targeting interruptible and multicore systems. |
|
 |
Michael Norrish Adjunct Associate Professor; Associate Professor, ANU |
Michael is interested in the use of mathematics and logic to help in the specification and development of computer hardware and software. He is interested both in working on specific applications projects in this area, and in the development of tools to make all such projects easier to work on. Michael now is a Associate Professor at ANU. |
|
 |
Rafal Kolanski Adjunct Lecturer; Founder at Proofcraft |
Rafal worked as a proof engineer at Trustworthy Systems until April 2021. He led the Proof Engineering team from 2016 until 2021. Rafal is interested in the formal verification of high assurance, system-level software, both from the perspective of verification in practice, but also proof maintenance and increasing the proof coverage of already verified systems. |
|
 |
Zoltan Kocsis Adjunct Lecturer |
Zoltan, a non-standard analyst by training, working on the correctness proof seL4-based OS code. |
|