Running the manual

Abstract

We propose a development methodology for designing and prototyping high assurance microkernels, and describe our application of it. The methodology is based on rapid prototyping and iterative refinement of the microkernel in a functional programming language. The prototype provides a precise semi-formal model, which is also combined with a machine simulator to form a reference implementation capable of executing real user-level software, to obtain accurate feedback on the suitability of the kernel API during development phases. We extract from the prototype a machine-checkable formal specification in higher-order logic, which may be used to verify properties of the design, and also results in corrections to the design without the need for full verification. We found the approach leads to productive, highly iterative development where formal modelling, semi-formal design and prototyping, and end use all contribute to a more mature final design in a shorter period of time.

Property-Based Testing: Climbing the Stairway to Verification

“…We chose to build on Haskell's QuickCheck rather than Isabelle/HOL's QuickCheck because it is easier for Cogent programmers to use a testing framework that lies in the ecosystem of a functional programming language rather than interact with a theorem prover. Haskell acts as a good communication medium between programmers and proof engineers [14,26]. Moreover, due to Isabelle/HOL's interactive nature, testers would have to wait for Isabelle to re-process the proof scripts affected by a change in a theory file, before they can run tests again.…”

Total Haskell is reasonable Coq

“…seL4 Haskell has been used as a prototyping language for formally verified systems in the past. The seL4 verified microkernel started with a Haskell prototype that was semiautomatically translated to Isabelle/HOL [10]. As in our work, they were restricted to the terminating fragment of Haskell.…”

Ready, set, verify! applying hs-to-coq to real-world Haskell code (experience report)

“…Haskell has been used as a prototyping language for mechanically verified systems in the past. The seL4 verified microkernel started with a Haskell prototype that was semi-automatically translated to Isabelle/HOL [Derrin et al 2006;Klein et al 2009]. The authors found that the availability of the Haskell prototype provided a machine-checkable formal executable specification of the system.…”