Verified protection model of the seL4 microkernel

Authors

Dhammika Elkaduwe, Gerwin Klein and Kevin Elphinstone

    School of Computer Science and Engineering
    University of New South Wales
    Sydney 2052 Australia
    
    NICTA, Sydney, Australia

Abstract

This paper presents a machine-checked high-level security analysis of seL4 -- an evolution of the L4 kernel series targeted to secure, embedded devices. We provide an abstract specification of the seL4 access control system together with a formal proof that shows how confined subsystems can be enforced. All proofs and specifications in this paper are developed in the interactive theorem prover Isabelle/HOL.

BibTeX Entry

  @inproceedings{Elkaduwe_GE_08,
    publisher        = {Springer},
    title            = {Verified Protection Model of the {seL4} Microkernel},
    series           = {LNCS},
    booktitle        = {VSTTE 2008},
    author           = {Dhammika Elkaduwe and Gerwin Klein and Kevin Elphinstone},
    year             = {2008},
    month            = {Oct},
    volume           = {5295},
    editor           = {Jim Woodcock and Natarajan Shankar},
    address          = {Toronto, Canada},
    pages            = {99--114}
  }

Download

• Elkaduwe_GE_08.pdf