Nitro Isolation Engine: Formally Verifying a Production Hypervisor (Invited Talk)

SymCert: Verifying SMT-Based Policy Analyses

SymCert is presented, a framework implemented in Lean for building verified SMT-based analyses of Cedar policies that provide a verified symbolic compiler and authorizer for reducing policies to SMT formulas, a hierarchy enforcer for ensuring well-formedness of counterexamples, and a counterex-ample extractor for provi...

Polygraph: From Transaction Isolation Guarantees to Isolation Verification

CoVerif: An Automated Contract Verifier for Java using Symbolic Execution

Specifying contracts as program behavior using Hoare triples is an established practice in software engineering. Compared to traditional testing approaches, formal verification of these contracts provides stronger guarantees of functional correctness. However, its practical adoption has remained limited since significa...

Assertions for Free: Transferring Invariants from Algorithm to Implementation Proofs (Functional Pearl)

This pearl shows how a clean separation can be achieved within the two-layer method by combining two simple ideas: expressing implementation correctness as a relational Hoare quadruple, and introducing assertion annotations into the abstract program to capture key invariants.

Formally-Verified, Tight Timing Constraints for Machine Code

Cloq is introduced, the first dependently typed, machine-checked framework for verifying timing properties of raw (stripped) machine code within the Rocq interactive theorem-proving environment, and provides high-assurance, high-precision timing guarantees that verify that real-time systems and cryptographic algorithms...

Formal Specification of Trusted Execution Environment APIs and Model Checking of Trusted Applications

A formal specification for TEE APIs using Maude focuses on the Trusted Storage API and the Cryptographic Operations API, both foundational to mobile and IoT applications and applies a state-space reduction technique based on invisible transitions to mitigate the state explosion problem.