Verifying the L4 virtual memory subsystem

Authors

Harvey Tuch and Gerwin Klein

    School of Computer Science and Engineering
    University of New South Wales
    Sydney 2052 Australia
    
    NICTA, Sydney, Australia

Abstract

We describe aspects of the formalisation and verification of the L4 micro-kernel. Starting from an abstract model of the virtual memory subsystem in L4, we prove safety properties about this model, and then refine the page table abstraction, one part of the model, towards C source code. All formalisations and proofs have been carried out in the theorem prover Isabelle.

BibTeX Entry

  @inproceedings{Tuch_Klein_04,
    publisher        = {National ICT Australia},
    title            = {Verifying the {L4} Virtual Memory Subsystem},
    booktitle        = {Proceedings of the {NICTA} workshop on {OS} verification 2004, Technical Report 0401005T-1},
    author           = {Harvey Tuch and Gerwin Klein},
    year             = {2004},
    month            = {Oct},
    editor           = {Gerwin Klein},
    address          = {Sydney, Australia},
    pages            = {73--97}
  }

Download

• Tuch_Klein_04.pdf