A High-Assurance, High-Performance Hardware-Based Cross-Domain System

Hardin, David S.; Slind, Konrad; Bortz, Mark; Potts, James; Owens, Scott

doi:10.1007/978-3-319-45477-1_9

Cited by 3 publications

(2 citation statements)

References 18 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…In this section, we describe the formal justification underlying our filter transformations. In earlier work [12] we reported on a verified compiler from extended regular expressions to table-driven DFAs, using Brzozowski's "derivative" approach; this compiler is available in the HOL4 distribution. 3 We make use of this compiler to create verified regexp-based filters.…”

Section: Filters Specified By Regular Expressionsmentioning

confidence: 99%

Synthesis of Verified Architectural Components for Critical Systems Hosted on a Verified Microkernel

Hardin¹

2020

Proceedings of the Annual Hawaii International Conference on System Sciences

Self Cite

View full text Add to dashboard Cite

We describe a method and tools for the creation of formally verified components that run on the verified seL4 microkernel. This synthesis and verification environment provides a basis to create safe and secure critical systems. The mathematically proved space and time separation properties of seL4 are particularly well-suited for the miniaturised electronics of smaller, lower-cost Unmanned Aerial Vehicles (UAVs), as multiple, independent UAV applications can be hosted on a single CPU with high assurance. We illustrate our method and tools with an example that implements security-improving transformations on system architectures captured in the Architecture Analysis and Design Language (AADL). We show how input validation filter components can be synthesised from regular expressions, and verified to meet arithmetic constraints extracted from the AADL model. Such filters comprise efficient guards on messages to/from the autonomous system.The correctness proofs for filters are automatically lifted to proofs of the corresponding properties on the lazy streams that model the communications of the generated seL4 threads. Finally, we guarantee that the intent of the autonomy application logic is accurately reflected in the application binary code hosted on seL4 through the use of the verified CakeML compiler.

show abstract

Section: Filters Specified By Regular Expressionsmentioning

confidence: 99%

Synthesis of Verified Architectural Components for Critical Systems Hosted on a Verified Microkernel

Hardin¹

2020

Proceedings of the Annual Hawaii International Conference on System Sciences

Self Cite

View full text Add to dashboard Cite

show abstract

“…DASL also shares a great deal of the verification-oriented tool infrastructure pioneered on the Guardol effort, such as the logic-based IVL, the RADA backend tree solver, as well a VHDL code generator. The latter capability allowed us to synthesize a formally proven high-level regular expression pattern matcher in inexpensive FPGA hardware that performed at Gigabit Ethernet line speeds [11]; these results prompted us to continue to develop VHDL code generation for DASL. DASL distinguishes itself from Guardol mainly in the datatype and graphtype declarations, the sized declaration, and the attendant syntactic restrictions that allow for compilation to an efficient in-place data structure representation.…”

Section: Related Work and Future Workmentioning

confidence: 99%

Using ACL2 in the Design of Efficient, Verifiable Data Structures for High-Assurance Systems

Hardin

Slind

2018

Electron. Proc. Theor. Comput. Sci.

Self Cite

View full text Add to dashboard Cite

Verification of algorithms and data structures utilized in modern autonomous and semi-autonomous vehicles for land, sea, air, and space presents a significant challenge. Autonomy algorithms, e.g., route planning, pattern matching, and inference, are based on complex data structures such as directed graphs and algebraic data types. Proof techniques for these data structures exist, but are oriented to unbounded, functional realizations, which are not typically efficient in either space or time. Autonomous systems designers, on the other hand, generally limit the space and time allocations for any given function, and require that algorithms deliver results within a finite time, or suffer a watchdog timeout. Furthermore, high-assurance design rules frown on dynamic memory allocation, preferring simple array-based data structure implementations.In order to provide efficient implementations of high-level data structures used in autonomous systems with the high assurance needed for accreditation, we have developed a verifying compilation technique that supports the "natural" functional proof style, but yet applies to more efficient data structure implementations. Our toolchain features code generation to mainstream programming languages, as well as GPU-based and hardware-based realizations. We base the Intermediate Verification Language for our toolchain upon higher-order logic; however, we have used ACL2 to develop our efficient yet verifiable data structure design. ACL2 is particularly well-suited for this work, with its sophisticated libraries for reasoning about aggregate data structures of arbitrary size, efficient execution of formal specifications, as well as its support for "single-threaded objects" -functional datatypes with imperative "under the hood" implementations.In this paper, we detail our high-assurance data structure design approach, including examples in ACL2 of common algebraic data types implemented using this design approach, proofs of correctness for those data types carried out in ACL2, as well as sample ACL2 implementations of relevant algorithms utilizing these efficient, high-assurance data structures.

show abstract

Verified Hardware/Software Co-Assurance: Enhancing Safety and Security for Critical Systems

Hardin¹

2020

2020 IEEE International Systems Conference (SysCon)

View full text Add to dashboard Cite

A High-Assurance, High-Performance Hardware-Based Cross-Domain System

Cited by 3 publications

References 18 publications

Synthesis of Verified Architectural Components for Critical Systems Hosted on a Verified Microkernel

Synthesis of Verified Architectural Components for Critical Systems Hosted on a Verified Microkernel

Using ACL2 in the Design of Efficient, Verifiable Data Structures for High-Assurance Systems

Verified Hardware/Software Co-Assurance: Enhancing Safety and Security for Critical Systems

Contact Info

Product

Resources

About