Anvil: Verifying liveness of cluster management controllers
Modern clouds depend crucially on an extensible ecosystem of thousands of controllers,
each managing critical systems (eg, a ZooKeeper cluster). A controller continuously …
each managing critical systems (eg, a ZooKeeper cluster). A controller continuously …
Design and verification of the arm confidential compute architecture
The increasing use of sensitive private data in computing is matched by a growing concern
regarding data privacy. System software such as hypervisors and operating systems are …
regarding data privacy. System software such as hypervisors and operating systems are …
Using lightweight formal methods to validate a key-value storage node in Amazon S3
J Bornholt, R Joshi, V Astrauskas, B Cully… - Proceedings of the …, 2021 - dl.acm.org
This paper reports our experience applying lightweight formal methods to validate the
correctness of ShardStore, a new key-value storage node implementation for the Amazon …
correctness of ShardStore, a new key-value storage node implementation for the Amazon …
Gobra: Modular specification and verification of go programs
Go is an increasingly-popular systems programming language targeting, especially,
concurrent and distributed systems. Go differentiates itself from other imperative languages …
concurrent and distributed systems. Go differentiates itself from other imperative languages …
WaVe: a verifiably secure WebAssembly sandboxing runtime
The promise of software sandboxing is flexible, fast and portable isolation; capturing the
benefits of hardwarebased memory protection without requiring operating system …
benefits of hardwarebased memory protection without requiring operating system …
Grove: a separation-logic library for verifying distributed systems
Grove is a concurrent separation logic library for verifying distributed systems. Grove is the
first to handle time-based leases, including their interaction with reconfiguration, crash …
first to handle time-based leases, including their interaction with reconfiguration, crash …
Verus: A practical foundation for systems verification
A Lattuada, T Hance, J Bosamiya, M Brun… - Proceedings of the …, 2024 - dl.acm.org
Formal verification is a promising approach to eliminate bugs at compile time, before they
ship. Indeed, our community has verified a wide variety of system software. However, much …
ship. Indeed, our community has verified a wide variety of system software. However, much …
Formal verification of a multiprocessor hypervisor on arm relaxed memory hardware
Concurrent systems software is widely-used, complex, and error-prone, posing a significant
security risk. We introduce VRM, a new framework that makes it possible for the first time to …
security risk. We introduce VRM, a new framework that makes it possible for the first time to …
VSync: push-button verification and optimization for synchronization primitives on weak memory models
J Oberhauser, RLDL Chehab, D Behrens… - Proceedings of the 26th …, 2021 - dl.acm.org
Implementing highly efficient and correct synchronization primitives on modern Weak
Memory Model (WMM) architectures, such as ARM and RISC-V, is very difficult even for …
Memory Model (WMM) architectures, such as ARM and RISC-V, is very difficult even for …
Sharding the state machine: Automated modular reasoning for complex concurrent systems
We present IronSync, an automated verification framework for concurrent code with shared
memory. IronSync scales to complex systems by splitting system-wide proofs into isolated …
memory. IronSync scales to complex systems by splitting system-wide proofs into isolated …