Abstract
This paper reports on the Xenon project's use of formal methods. Xenon is a higher-assurance secure hypervisor based on re-engineering the Xen open-source hypervisor. The Xenon project used formal specifications both for assurance and as guides for security re-engineering. We formally modeled the fundamental definition of security, the hyper-call interface behavior, and the internal modular design. We used 3 formalisms: CSP, Z, and Circus for this work. Circus is a combination of Standard Z, CSP, with its semantics given in Hoare and He's unifying theories of programming. Circus is suited for both event-based and state-based modeling. In this extended abstract, we report our experiences with using these formalisms for assurance.
Talk to us
Join us for a 30 min session where you can share your feedback and ask us any queries you have
Disclaimer: All third-party content on this website/platform is and will remain the property of their respective owners and is provided on "as is" basis without any warranties, express or implied. Use of third-party content does not indicate any affiliation, sponsorship with or endorsement by them. Any references to third-party content is to identify the corresponding services and shall be considered fair use under The CopyrightLaw.