2026-07-22T00:09:43Z https://drops.dagstuhl.de/oai

oai:drops-oai.dagstuhl.de:4625 2024-03-06T10:35:09Z ddc:004 open_access

Formally Verified Implementation of an Idealized Model of Virtualization Barthe, Gilles Betarte, Gustavo Campo, Juan Diego Chimento, Jesús Mauricio Luna, Carlos virtualization Cache and TLB Executable specification Error management Isolation VirtualCert is a machine-checked model of virtualization that can be used to reason about isolation between operating systems in presence of cache-based side-channels. In contrast to most prominent projects on operating systems verification, where such guarantees are proved directly on concrete implementations of hypervisors, VirtualCert abstracts away most implementations issues and specifies the effects of hypervisor actions axiomatically, in terms of preconditions and postconditions. Unfortunately, seemingly innocuous implementation issues are often relevant for security. Incorporating the treatment of errors into VirtualCert is therefore an important step towards strengthening the isolation theorems proved in earlier work. In this paper, we extend our earlier model with errors, and prove that isolation theorems still apply. In addition, we provide an executable specification of the hypervisor, and prove that it correctly implements the axiomatic model. The executable specification constitutes a first step towards a more realistic implementation of a hypervisor, and provides a useful tool for validating the axiomatic semantics developed in previous work. Schloss Dagstuhl – Leibniz-Zentrum für Informatik Gilles Barthe and Gustavo Betarte and Juan Diego Campo and Jesús Mauricio Chimento and Carlos Luna 2014 Is Part Of LIPIcs, Volume 26, 19th International Conference on Types for Proofs and Programs (TYPES 2013) InProceedings Text doc-type:ResearchArticle publishedVersion application/pdf doi:10.4230/LIPIcs.TYPES.2013.45 urn:nbn:de:0030-drops-46254 https://drops.dagstuhl.de/entities/document/10.4230/LIPIcs.TYPES.2013.45 eng https://creativecommons.org/licenses/by/3.0/legalcode