Trustworthy Systems

Verifying the L4 virtual memory subsystem

Authors

Harvey Tuch and Gerwin Klein

NICTA, Sydney, Australia
UNSW, Australia

Abstract

We describe aspects of the formalisation and verification of the L4 micro-kernel. Starting from an abstract model of the virtual memory subsystem in L4, we prove safety properties about this model, and then refine the page table abstraction, one part of the model, towards C source code. All formalisations and proofs have been carried out in the theorem prover Isabelle.

BibTeX Entry

  @inproceedings{Tuch_Klein_04,
    address          = {Sydney, Australia},
    author           = {Harvey Tuch and Gerwin Klein},
    booktitle        = {Proceedings of the {NICTA} workshop on {OS} verification 2004, Technical Report 0401005T-1},
    editor           = {Gerwin Klein},
    month            = oct,
    pages            = {73--97},
    paperurl         = {https://trustworthy.systems/publications/papers/Tuch_Klein_04.pdf},
    publisher        = {NICTA},
    title            = {Verifying the {L4} Virtual Memory Subsystem},
    year             = {2004}
  }

Download