Anvil: Verifying liveness of cluster management controllers

X Sun, W Ma, JT Gu, Z Ma, T Chajed, J Howell… - … USENIX Symposium on …, 2024 - usenix.org
Modern clouds depend crucially on an extensible ecosystem of thousands of controllers,
each managing critical systems (eg, a ZooKeeper cluster). A controller continuously …

Design and verification of the arm confidential compute architecture

X Li, X Li, C Dall, R Gu, J Nieh, Y Sait… - 16th USENIX Symposium …, 2022 - usenix.org
The increasing use of sensitive private data in computing is matched by a growing concern
regarding data privacy. System software such as hypervisors and operating systems are …

Using lightweight formal methods to validate a key-value storage node in Amazon S3

J Bornholt, R Joshi, V Astrauskas, B Cully… - Proceedings of the …, 2021 - dl.acm.org
This paper reports our experience applying lightweight formal methods to validate the
correctness of ShardStore, a new key-value storage node implementation for the Amazon …

Gobra: Modular specification and verification of go programs

FA Wolf, L Arquint, M Clochard, W Oortwijn… - … on Computer Aided …, 2021 - Springer
Go is an increasingly-popular systems programming language targeting, especially,
concurrent and distributed systems. Go differentiates itself from other imperative languages …

WaVe: a verifiably secure WebAssembly sandboxing runtime

E Johnson, E Laufer, Z Zhao, D Gohman… - … IEEE Symposium on …, 2023 - ieeexplore.ieee.org
The promise of software sandboxing is flexible, fast and portable isolation; capturing the
benefits of hardwarebased memory protection without requiring operating system …

Grove: a separation-logic library for verifying distributed systems

U Sharma, R Jung, J Tassarotti, F Kaashoek… - Proceedings of the 29th …, 2023 - dl.acm.org
Grove is a concurrent separation logic library for verifying distributed systems. Grove is the
first to handle time-based leases, including their interaction with reconfiguration, crash …

Verus: A practical foundation for systems verification

A Lattuada, T Hance, J Bosamiya, M Brun… - Proceedings of the …, 2024 - dl.acm.org
Formal verification is a promising approach to eliminate bugs at compile time, before they
ship. Indeed, our community has verified a wide variety of system software. However, much …

Formal verification of a multiprocessor hypervisor on arm relaxed memory hardware

R Tao, J Yao, X Li, SW Li, J Nieh, R Gu - Proceedings of the ACM …, 2021 - dl.acm.org
Concurrent systems software is widely-used, complex, and error-prone, posing a significant
security risk. We introduce VRM, a new framework that makes it possible for the first time to …

VSync: push-button verification and optimization for synchronization primitives on weak memory models

J Oberhauser, RLDL Chehab, D Behrens… - Proceedings of the 26th …, 2021 - dl.acm.org
Implementing highly efficient and correct synchronization primitives on modern Weak
Memory Model (WMM) architectures, such as ARM and RISC-V, is very difficult even for …

Sharding the state machine: Automated modular reasoning for complex concurrent systems

T Hance, Y Zhou, A Lattuada, R Achermann… - … USENIX Symposium on …, 2023 - usenix.org
We present IronSync, an automated verification framework for concurrent code with shared
memory. IronSync scales to complex systems by splitting system-wide proofs into isolated …