Formal verification is a promising approach to eliminate bugs at compile time, before they
ship. Indeed, our community has verified a wide variety of system software. However, much …

Systems code is challenging to verify, because it uses constructs (like raw pointers, pointer
arithmetic, and bit twiddling) that are hard for tools to reason about. Existing approaches …

As trusted execution environments (TEE) have become the corner stone for secure cloud
computing, it is critical that they are reliable and enforce proper isolation, of which a key …

Historically, development of formally-verified operating systems was a challenging, time-
consuming undertaking that relied on a narrow formal verification expertise and required …

A rootkit or an attacker that exploited a single vulnerability in a monolithic OS kernel like
Linux could obtain full authority over the system. We introduce SECvma, a new system with …