Protected-module architectures such as Intel SGX provide strong isolation guarantees to
sensitive parts of applications while the system is up and running. Unfortunately systems in …

A fully abstract compiler prevents security features of the source language from being
bypassed by an attacker operating at the target language level. Unfortunately, developing …

We propose a new formal criterion for evaluating secure compilation schemes for unsafe
languages, expressing end-to-end security guarantees for software components that may …

Compartmentalization is good security-engineering practice. By breaking a large software
system into mutually distrustful components that run with minimal privileges, restricting their …

Separation logic is a powerful program logic for the static modular verification of imperative
programs. However, dynamic checking of separation logic contracts on the boundaries …

We give a rigorous characterization of what it means for a programming language to be
memory safe, capturing the intuition that memory safety supports local reasoning about …

Smart contracts are programs that execute in blockchains such as Ethereum to manipulate
digital assets. Since bugs in smart contracts may lead to substantial financial losses, there is …

Though there has been remarkable progress on formally verified compilers in recent years,
most of these compilers suffer from a serious limitation: they are proved correct under the …

We introduce SCIO*, a formally secure compilation framework for statically verified programs
performing input-output (IO). The source language is an F* subset in which a verified …

We investigate the* model checking* problem for symbolic-heap separation logic with user-
defined inductive predicates, ie, the problem of checking that a given stack-heap memory …