Conventional testing methods often fail to detect hidden flaws in complex embedded
software such as device drivers or file systems. This deficiency incurs significant …

Event-B is a formal method used for specifying and reasoning about systems. Rodin is a
toolset for developing system models in Event-B. Our experiment which is outlined in this …

In today's information society, flash memory has become a virtually indispensable
component, particularly for mobile devices. In order for mobile devices to operate …

This paper reports on the Xenon project's use of formal methods. Xenon is a higher-
assurance secure hypervisor based on re-engineering the Xen open-source hypervisor. The …

This work presents a formal specification and an implementation of an erase block
management layer and a formal model of the flash driver interface. It is part of our effort to …

We present a research roadmap for the second pilot project in the Verified Software Grand
Challenge on formally verified POSIX file stores. The work is inspired by the requirements for …

An abstract file system is defined here as a partial function from (absolute) paths to data.
Such a file system determines the set of valid paths. It allows the file system to be read and …

In today's information society, flash memory has become a virtually indispensable
component, particularly for mobile devices. In order for mobile devices to operate …

The main contribution of this thesis is a methodology for designing, implementing and
verifying realistic file systems with evidence of its effectiveness by application to a non-trivial …

I first met Tony Hoare in a hotel bar in Cambridge in 1979. I think that it might have been the
University Arms on Parker's Piece. We had both been invited to a symposium on formal …