FSCQ is the first file system with a machine-checkable proof (using the Coq proof assistant)
that its implementation meets its specification and whose specification includes crashes …

This article shows how to use model checking to find serious errors in file systems. Model
checking is a formal verification technique tuned for finding corner-case errors by …

We present an approach to writing and formally verifying high-assurance file-system code in
a restricted language called Cogent, supported by a certifying compiler that produces C …

We present the first verification of full functional correctness for a range of linked data
structure implementations, including mutable lists, trees, graphs, and hash tables …

DFSCQ is the first file system that (1) provides a precise specification for fsync and
fdatasync, which allow applications to achieve high performance and crash safety, and (2) …

Large-scale data centers and cloud computing have turned system configuration into a
challenging problem. Several widely-publicized outages have been blamed not on software …

We suggest that mechanized multi-agent deontic logics might be appropriate vehicles for
engineering trustworthy robots. Mechanically checked proofs in such logics can serve to …

This paper presents a framework aimed at significantly reducing the cost of proving
functional correctness for low-level operating systems components. The framework is …

Program analysis and verification require decision procedures to reason on theories of data
structures. Many problems can be reduced to the satisfiability of sets of ground literals in …

A formal framework for software development and analysis is presented, which aims at
reducing the gap between formal specification and implementation by integrating the two …