Skip to main content


Verifying the L4 virtual memory subsystem


Harvey Tuch and Gerwin Klein

NICTA, Sydney, Australia
UNSW, Australia


We describe aspects of the formalisation and verification of the L4 micro-kernel. Starting from an abstract model of the virtual memory subsystem in L4, we prove safety properties about this model, and then refine the page table abstraction, one part of the model, towards C source code. All formalisations and proofs have been carried out in the theorem prover Isabelle.

BibTeX Entry

    publisher        = {NICTA},
    author           = {Harvey Tuch and Gerwin Klein},
    month            = oct,
    editor           = {Gerwin Klein},
    year             = {2004},
    title            = {Verifying the {L4} Virtual Memory Subsystem},
    booktitle        = {Proceedings of the {NICTA} workshop on {OS} verification 2004, Technical Report 0401005T-1},
    pages            = {73--97},
    address          = {Sydney, Australia}


Served by Apache on Linux on seL4.
Served by Apache on Linux on seL4.