Choreographies are an abstraction for globally describing deadlock-free communicating
systems. A choreography can be compiled into multiple endpoints preserving the global …

Compilers often weaken or even discard software-based countermeasures commonly used
to protect programs against side-channel attacks; worse, they may also introduce …

We present a Separation Logic with space credits for reasoning about heap space in a
sequential call-by-value lambda-calculus equipped with garbage collection and mutable …

Many security properties of interest are captured by instrumented semantics that model the
functional behavior and the leakage of programs. For several important properties, including …

We present SL♢, a Separation Logic that allows controlling the heap space consumption of
a program in the presence of dynamic memory allocation and garbage collection. A user of …

Safety-critical systems such as avionics need to be engineered to be cyber resilient meaning
that systems are able to detect and recover from attacks or safely shutdown. As there are few …

We introduce Pancake, a new language for verifiable, low-level systems programming,
especially device drivers. Pancake eschews complex type systems to make the language …

Verified compilers such as CompCert and CakeML have become increasingly realistic over
the last few years, but their support for floating-point arithmetic has thus far been limited. In …

The CakeML project has developed a proof-producing code generation mechanism for the
HOL4 theorem prover, a verified compiler for ML and, using these, a number of verified …

We present IrisFit, a Separation Logic with space credits for reasoning about heap space in
a concurrent call-by-value language equipped with tracing garbage collection and shared …