Operating system verification—An overview

Operating system verification—An overview 65
Greve D, Wilding M, Vanfleet W M 2003 A separation kernel formal security policy. In: Fourth
International Workshop on the ACL2 Prover and its Applications (ACL2-2003). Available
from http://www.cs.utexas.edu/users/moore/acl2/workshop-2003/contrib/greve-wilding-vanfleet/
security-policy.pdf
Greve D, Wilding M, Vanfleet W M 2005 High assurance formal security policy modeling. In: Proceedings
of the 17th Systems and Software Technology Conference 2005 (SSTC05)
Guttman J D, Herzog A L, Ramsdell J D, Skorupka C W 2005 Verifying information flow goals in
security-enhanced Linux. Journal of Computer Security 13(1): 115–134
Haigh J T, Young W D 1987 Extending the noninterference version of MLS for SAT. IEEE Transactions
on Software Engineering 13(2): 141–150
Hansen P B 1970 The nucleus of a multiprogramming operating system. Communications of the ACM
13(4): 238–250
Hardin D S, Smith E W, Young W D 2006 A robust machine code proof framework for highly secure
applications. In: ACL2 06: Proceedings of the sixth international workshop on the ACL2 theorem
prover and its applications, (New York, NY, USA: ACM) 11–20
Hardy N 1985 KeyKOS architecture, ACM SIGOPS Operating Systems Review 19(4): 8–25
Harrison J 1996 HOL Light: a tutorial introduction. In: M Srivas, A Camilleri, (eds), Proceedings of
the First International Conference on Formal Methods in Computer-Aided Design (FMCAD96),
Vol. 1166 of Lecture Notes in Computer Science, Springer-Verlag 265–269
Harrison J 2006 Towards self-verification of HOL Light. In: U Furbach, N Shankar, (eds), Proceedings
of the third International Joint Conference on Automated Reasoning (IJCAR 2006), Vol. 4130 of
Lecture Notes in Computer Science, Springer-Verlag, Seattle, WA 177–191
Härtig H, Hohmuth M, Wolter J 1998 Taming Linux. In: K A Hawick, H A James, (eds), Proceedings of
the 5th Annual Australasian Conference on Parallel And Real-Time Systems (PART 98), Springer-
Verlag, Adelaide, Australia
Heiser G, Elphinstone K, Kuz I, Klein G, Petters S M 2007 Towards trustworthy computing systems:
Taking microkernels to the next level. ACM Operating Systems Review 41(3)
Heitmeyer C L, Archer M, Leonard E I, McLean J 2006 Formal specification and verification of data
separation in a separation kernel for an embedded system. In: CCS 06: Proceedings of the 13th ACM
conference on Computer and communications security, (New York, NY, USA: ACM) 346–355
Heitmeyer C L, Archer M, Leonard E, McLean J 2008 Applying formal methods to a certifiably secure
software system. IEEE Transactions on Software Engineering 34(1): 82–98
Hennessy J, Patterson D 1996 Computer Architecture: A Quantitative Approach, Morgan Kaufmann,
San Francisco, USA
Hillebrand M A, in der Rieden T, Paul W J 2005 Dealing with I/O devices in the context of pervasive
system verification. In: ICCD 05: Proceedings of the 2005 International Conference on Computer
Design, IEEE Computer Society, Washington, DC, USA 309–316
Hillebrand M A, Paul W J 2008 On the architecture of system verification environments. In: Hardware
and Software: Verification and Testing, Vol. 4899 of Lecture Notes in Computer Science, (Germany:
Springer-Verlag, Berlin) 153–168
Hoare C A R 1969 An axiomatic basis for computer programming. Communications of the ACM
12(10): 576–580
Hohmuth M, Härtig H 2001 Pragmatic nonblocking synchronization for real-time systems. In: Proceedings
of the General Track: 2002 USENIX Annual Technical Conference, USENIX Association,
Berkeley, CA, USA 217–230
Hohmuth M, Tews H 2003 The semantics of C++ data types: Towards verifying low-level system
components. In: D Basin, B Wolff, (eds), TPHOLs 2003, Emerging Trends Track, Technical Report
No. 187, Institut für Informatik, Universität Freiburg, Freiburg, Germany 127–144
Hohmuth M, Tews H 2005 The VFiasco approach for a verified operating system. In: Proceedings
of the 2nd ECOOP Workshop on Programming Languages and Operating Systems, Glasgow, UK.
Available from http://wwwtcs.inf.tu-dresden.de/ tews/Plos-2005/ecoop-plos-05-a4.ps