{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,3,26]],"date-time":"2025-03-26T08:35:56Z","timestamp":1742978156508,"version":"3.40.3"},"publisher-location":"Cham","reference-count":37,"publisher":"Springer International Publishing","isbn-type":[{"type":"print","value":"9783030591519"},{"type":"electronic","value":"9783030591526"}],"license":[{"start":{"date-parts":[[2020,1,1]],"date-time":"2020-01-01T00:00:00Z","timestamp":1577836800000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2020,1,1]],"date-time":"2020-01-01T00:00:00Z","timestamp":1577836800000},"content-version":"vor","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2020]]},"DOI":"10.1007\/978-3-030-59152-6_17","type":"book-chapter","created":{"date-parts":[[2020,10,11]],"date-time":"2020-10-11T23:02:35Z","timestamp":1602457355000},"page":"305-322","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":2,"title":["Verification of a Generative Separation Kernel"],"prefix":"10.1007","author":[{"given":"Inzemamul","family":"Haque","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"D.","family":"D\u2019Souza","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"P.","family":"Habeeb","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"A.","family":"Kundu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ganesh","family":"Babu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2020,10,12]]},"reference":[{"key":"17_CR1","doi-asserted-by":"publisher","DOI":"10.1017\/CBO9781139195881","volume-title":"Modeling in Event-B - System and Software Engineering","author":"JR Abrial","year":"2010","unstructured":"Abrial, J.R.: Modeling in Event-B - System and Software Engineering. Cambridge University Press, Cambridge (2010)"},{"key":"17_CR2","unstructured":"AdaCore: GNAT Pro Ada toolsuite (2018). \nhttps:\/\/www.adacore.com\/gnatpro"},{"key":"17_CR3","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"171","DOI":"10.1007\/978-3-642-22110-1_14","volume-title":"Computer Aided Verification","author":"C Barrett","year":"2011","unstructured":"Barrett, C., et al.: CVC4. In: Gopalakrishnan, G., Qadeer, S. (eds.) CAV 2011. LNCS, vol. 6806, pp. 171\u2013177. Springer, Heidelberg (2011). \nhttps:\/\/doi.org\/10.1007\/978-3-642-22110-1_14"},{"key":"17_CR4","unstructured":"Baumann, C., Bormer, T.: Verifying the PikeOS microkernel: first results in the Verisoft XT avionics project. In: Doctoral Symposium on Systems Software Verification. p. 20 (2009)"},{"key":"17_CR5","doi-asserted-by":"crossref","unstructured":"Baumann, C., Bormer, T., Blasum, H., Tverdyshev, S.: Proving memory separation in a microkernel by code level verification. In: Proceedings of the 14th Object\/Component\/Service-Oriented Real-Time Distributed Computing Workshops, pp. 25\u201332. IEEE (2011)","DOI":"10.1109\/ISORCW.2011.14"},{"key":"17_CR6","unstructured":"Buerki, R., Rueegsegger, A.K.: Muen - An x86\/64 separation kernel for high assurance. Technical report, Univ. Applied Sc. Rapperswils (HSR) (2013). \nhttps:\/\/muen.codelabs.ch\/"},{"key":"17_CR7","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"23","DOI":"10.1007\/978-3-642-03359-9_2","volume-title":"Theorem Proving in Higher Order Logics","author":"E Cohen","year":"2009","unstructured":"Cohen, E., et al.: VCC: a practical system for verifying concurrent C. In: Berghofer, S., Nipkow, T., Urban, C., Wenzel, M. (eds.) TPHOLs 2009. LNCS, vol. 5674, pp. 23\u201342. Springer, Heidelberg (2009). \nhttps:\/\/doi.org\/10.1007\/978-3-642-03359-9_2"},{"key":"17_CR8","unstructured":"Conchon, S.: SMT techniques and their applications: from Alt-Ergo to Cubicle. Th\u00e8se d\u2019habilitation, Universit\u00e9 Paris-Sud (Dec 2012)"},{"key":"17_CR9","doi-asserted-by":"crossref","unstructured":"Crespo, A., Ripoll, I., Masmano, M.: Partitioned Embedded Architecture Based on Hypervisor: The XtratuM approach. In: European Dependable Computing Conference (EDCC), Spain. pp. 67\u201372. IEEE (2010)","DOI":"10.1109\/EDCC.2010.18"},{"key":"17_CR10","doi-asserted-by":"crossref","unstructured":"Dam, M., Guanciale, R., Khakpour, N., Nemati, H., Schwarz, O.: Formal verification of information flow security for a simple ARM-based separation kernel. In: Proeedings. ACM Conference on Computer and Communications Security, CCS 2013. pp. 223\u2013234. ACM (2013)","DOI":"10.1145\/2508859.2516702"},{"key":"17_CR11","unstructured":"Directorate, I.A.: U.S. Government Protection Profile for Separation Kernels in Environments Requiring High Robustness, Version 1.03 29 June 2007 (2007). \nhttps:\/\/www.niap-ccevs.org\/Profile\/Info.cfm?id=65"},{"key":"17_CR12","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"21","DOI":"10.1007\/978-3-319-12154-3_2","volume-title":"Verified Software: Theories, Tools and Experiments","author":"S Divakaran","year":"2014","unstructured":"Divakaran, S., D\u2019Souza, D., Sridhar, N.: Efficient refinement checking in VCC. In: Giannakopoulou, D., Kroening, D. (eds.) VSTTE 2014. LNCS, vol. 8471, pp. 21\u201336. Springer, Cham (2014). \nhttps:\/\/doi.org\/10.1007\/978-3-319-12154-3_2"},{"key":"17_CR13","unstructured":"Green Hills Software: INTEGRITY Multivisor (2019). \nhttps:\/\/www.ghs.com"},{"key":"17_CR14","unstructured":"Gu, R., et a: CertiKOS: an extensible architecture for building certified concurrent OS kernels. In: USENIX Symposium Operating Systems Design and Implementation (OSDI), pp. 653\u2013669 (2016)"},{"key":"17_CR15","unstructured":"Haque, I., D\u2019Souza, D., P, H., Kundu, A., Babu, G.: Verification of a generative separation kernel (2020). \nhttps:\/\/arxiv.org\/abs\/2001.10328v2"},{"key":"17_CR16","doi-asserted-by":"crossref","unstructured":"Heitmeyer, C.L., Archer, M., Leonard, E.I., McLean, J.D.: Formal specification and verification of data separation in a separation kernel for an embedded system. In: Proceedings of the Conference on Computer and Communications Security (CCS), pp. 346\u2013355. ACM (2006)","DOI":"10.1145\/1180405.1180448"},{"key":"17_CR17","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"183","DOI":"10.1007\/3-540-07994-7_54","volume-title":"Language Hierarchies and Interfaces","author":"CAR Hoare","year":"1976","unstructured":"Hoare, C.A.R.: Proof of correctness of data representations. In: Bauer, F.L., et al. (eds.) Language Hierarchies and Interfaces. LNCS, vol. 46, pp. 183\u2013193. Springer, Heidelberg (1976). \nhttps:\/\/doi.org\/10.1007\/3-540-07994-7_54"},{"key":"17_CR18","unstructured":"Hoare, C.A.R., et al.: Data Refinement Refined (Draft). Technical report, Oxford University (1985)"},{"key":"17_CR19","unstructured":"Intel Corp.: Intel 64 and IA-32 architectures software developer\u2019s manual, vol 3C (May 2018)"},{"issue":"1","key":"17_CR20","doi-asserted-by":"publisher","first-page":"27","DOI":"10.1007\/s12046-009-0002-4","volume":"34","author":"G Klein","year":"2009","unstructured":"Klein, G.: Operating system verification: an overview. Sadhana 34(1), 27\u201369 (2009)","journal-title":"Sadhana"},{"key":"17_CR21","unstructured":"Klein, G., et al.: Comprehensive formal verification of an OS microkernel. ACM Trans. Comput. Syst. 32, 1\u201370 (2014). Article 2"},{"key":"17_CR22","doi-asserted-by":"crossref","unstructured":"Klein, G., et al.: seL4: formal verification of an OS kernel. In: Proceedings of the 22nd ACM Symposium on Operating Systems Principles 2009, Big Sky. pp. 207\u2013220. ACM (2009)","DOI":"10.1145\/1629575.1629596"},{"key":"17_CR23","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"806","DOI":"10.1007\/978-3-642-05089-3_51","volume-title":"FM 2009: Formal Methods","author":"D Leinenbach","year":"2009","unstructured":"Leinenbach, D., Santen, T.: Verifying the Microsoft hyper-v hypervisor with VCC. In: Cavalcanti, A., Dams, D.R. (eds.) FM 2009. LNCS, vol. 5850, pp. 806\u2013809. Springer, Heidelberg (2009). \nhttps:\/\/doi.org\/10.1007\/978-3-642-05089-3_51"},{"key":"17_CR24","doi-asserted-by":"crossref","unstructured":"Leroy, X.: Formal certification of a compiler back-end or: programming a compiler with a proof assistant. In: Proceedings of the Principles of Program Languages (POPL), pp. 42\u201354. ACM (2006)","DOI":"10.1145\/1111320.1111042"},{"key":"17_CR25","unstructured":"LynxSecure: LynxSecure Sep. Kernel Hypervisor (2019). \nhttp:\/\/www.lynx.com\/"},{"key":"17_CR26","doi-asserted-by":"crossref","unstructured":"Mai, H., Pek, E., Xue, H., King, S.T., Madhusudan, P.: Verifying security invariants in ExpressOS. In: Proceedings of the Architectural Support for Programming Languages and Operating Systems (ASPLOS), pp. 293\u2013304. ACM (2013)","DOI":"10.1145\/2499368.2451148"},{"key":"17_CR27","unstructured":"Masmano, M., Ripoll, I., Crespo, A., Jean-Jacques, M.: XtratuM: A Hypervisor for Safety Critical Embedded Systems. In: Real Time Linux Workshop (2009)"},{"key":"17_CR28","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"337","DOI":"10.1007\/978-3-540-78800-3_24","volume-title":"Tools and Algorithms for the Construction and Analysis of Systems","author":"L de Moura","year":"2008","unstructured":"de Moura, L., Bj\u00f8rner, N.: Z3: an efficient SMT solver. In: Ramakrishnan, C.R., Rehof, J. (eds.) TACAS 2008. LNCS, vol. 4963, pp. 337\u2013340. Springer, Heidelberg (2008). \nhttps:\/\/doi.org\/10.1007\/978-3-540-78800-3_24"},{"key":"17_CR29","doi-asserted-by":"crossref","unstructured":"Nelson, L., et al.: Hyperkernel: push-button verification of an OS kernel. In: Proceedings of the Symposium Operating Systems Principles (SOSP), pp. 252\u2013269. ACM (2017)","DOI":"10.1145\/3132747.3132748"},{"key":"17_CR30","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"151","DOI":"10.1007\/BFb0054170","volume-title":"Tools and Algorithms for the Construction and Analysis of Systems","author":"A Pnueli","year":"1998","unstructured":"Pnueli, A., Siegel, M., Singerman, E.: Translation validation. In: Steffen, B. (ed.) TACAS 1998. LNCS, vol. 1384, pp. 151\u2013166. Springer, Heidelberg (1998). \nhttps:\/\/doi.org\/10.1007\/BFb0054170"},{"key":"17_CR31","doi-asserted-by":"crossref","unstructured":"Rushby, J.M.: Design and verification of secure systems. In: Proceedings of the Symposium Operating System Principles (SOSP), pp. 12\u201321. ACM (1981)","DOI":"10.1145\/1067627.806586"},{"key":"17_CR32","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"352","DOI":"10.1007\/3-540-11494-7_23","volume-title":"International Symposium on Programming","author":"JM Rushby","year":"1982","unstructured":"Rushby, J.M.: Proof of separability a verification technique for a class of security kernels. In: Dezani-Ciancaglini, M., Montanari, U. (eds.) Programming 1982. LNCS, vol. 137, pp. 352\u2013367. Springer, Heidelberg (1982). \nhttps:\/\/doi.org\/10.1007\/3-540-11494-7_23"},{"key":"17_CR33","doi-asserted-by":"crossref","unstructured":"Sanan, D., Butterfield, A., Hinchey, M.: Separation kernel verification: the xtratum case study. In: Proceedings of the Verified Software: Theories, Tools and Exp. (VSTTE), pp. 133\u2013149 (2014)","DOI":"10.1007\/978-3-319-12154-3_9"},{"key":"17_CR34","unstructured":"Sysgo AG: PikeOS 4.2 hypervisor (2018). \nhttps:\/\/www.sysgo.com\/"},{"key":"17_CR35","unstructured":"Tuch, H., Klein, G.: Verifying the L4 virtual memory subsystem. In: Proceedings of the NICTA Formal Methods Workshop on Operating Systems Verification, pp. 73\u201397 (2004)"},{"key":"17_CR36","unstructured":"Wind River: VxWorks MILS Platform (2019). \nhttps:\/\/www.windriver.com"},{"key":"17_CR37","doi-asserted-by":"crossref","unstructured":"Yang, J., Hawblitzel, C.: Safe to the last instruction: automated verification of a type-safe operating system. In: Proceedings of the Programming Language Design and Implementation (PLDI), pp. 99\u2013110. ACM (2010)","DOI":"10.1145\/1809028.1806610"}],"container-title":["Lecture Notes in Computer Science","Automated Technology for Verification and Analysis"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-030-59152-6_17","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2020,10,11]],"date-time":"2020-10-11T23:06:27Z","timestamp":1602457587000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-030-59152-6_17"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020]]},"ISBN":["9783030591519","9783030591526"],"references-count":37,"URL":"https:\/\/doi.org\/10.1007\/978-3-030-59152-6_17","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2020]]},"assertion":[{"value":"12 October 2020","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ATVA","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Symposium on Automated Technology for Verification and Analysis","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Hanoi","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Vietnam","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2020","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"19 October 2020","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"23 October 2020","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"18","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"atva2020","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"http:\/\/fit.uet.vnu.edu.vn\/atva2020\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Single-blind","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"easychair","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"75","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"27","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"0","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"36% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"3","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"6","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Yes","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}}]}}