The author reviews Kit, a small multitasking operating system kernel written in the machine
language of a uniprocessor von Neumann computer. The kernel is proved to implement on …

This paper describes our experience applying formal methods to a critical component in the
Linux kernel, the just-in-time compilers (" JITs") for the Berkeley Packet Filter (BPF) virtual …

Mountaineers use pitons to protect themselves from falls. The lead climber wears a harness
to which a rope is tied. As the climber ascends, the rope is paid out by a partner on the …

We describe the specification, implementation and proof of correctness of a code generator
for a subset of Gypsy 2.05. The code generator is specified in the Boyer-Moore logic; its …

This paper describes the rst half of the formal veri cation of a Prolog compiler with the KIV
Karlsruhe Interactive Veri er" system. Our work is based on BR95, where an operational …

This chapter describes the first half of the fonnal, machine-supported verification of a Prolog
compiler with the KIV system. Our work is based on the mathematical analysis given in …

Two main kinds of tools available for formal software verification are point tools and general-
purpose tools. Point tools are targeted towards bug-hunting or proving a fixed set of …

We propose a grand challenge for the formal methods community: build and mechanically
verify a practical computing system, from transistors to software. The challenge is both …

This book is about formal veri? cation, that is, the use of mathematical reasoning to ensure
correct execution of computing systems. With the increasing use of c-puting systems in …

We describe a methodology for proving theorems mechanically about Java methods. The
theorem prover used is the ACL2 system, an industrial-strength version of the Boyer-Moore …