Abstract:A program that maintains key safety properties even when interacting with arbitrary untrusted code is said to enjoy \emph{robust safety}. Proving that a program written in a mainstream language is robustly safe is typically challenging because it requires static verification tools that work precisely even in the presence of language features like dynamic dispatch and shared mutability. The emerging \move programming language was designed to support strong encapsulation and static verification in the service of secure smart contract programming. However, the language design has not been analyzed using a theoretical framework like robust safety. In this paper, we define robust safety for the \move language and introduce a generic framework for static tools that wish to enforce it. Our framework consists of two abstract components: a program verifier that can prove an invariant holds in a closed-world setting (e.g., the Move Prover), and a novel \emph{encapsulator} that checks if the verifier's result generalizes to an open-world setting. We formalise an escape analysis as an instantiation of the encapsulator and prove that it attains the required security properties. Finally, we implement our encapsulator as an extension to the Move Prover and use the combination to analyze a representative benchmark set of real-world \move programs. This toolchain certifies $>$99\% of the \move modules we analyze, validating that automatic enforcement of strong security properties like robust safety is practical for \move.

Safe Environmental Envelopes of Discrete Systems

Physics-Constrained Robustness Verification of Intelligent Security Assessment for Power Systems

Safety Verification of Stochastic Systems: A Set-Erosion Approach

Robust Safety for Move

Data-driven Safety Verification of Stochastic Systems via Barrier Certificates

A framework to measure the robustness of programs in the unpredictable environment

Environment Model based Requirements Consistency Verification: An Example

Distributionally Robust Safety Verification for Markov Decision Processes

State Based Robustness Testing for Components

Mining Interface Specifications for Generating Checkable Robustness Properties

Toward `verifying' a Water Treatment System

Efficiently Verifying Mutually Exclusive Inconsistency of Requirements for Embedded Systems

Investigating Robustness in Cyber-Physical Systems: Specification-Centric Analysis in the face of System Deviations

Safe Control Synthesis Using Environmentally Robust Control Barrier Functions

Sufficient and Necessary Barrier-like Conditions for Safety and Reach-avoid Verification of Stochastic Discrete-time Systems

Data-driven verification and synthesis of stochastic systems via barrier certificates

Effective Generation of Interface Robustness Properties for Static Analysis

Certifiably Robust Policies for Uncertain Parametric Environments

Learning Performance Bounds for Safety-Critical Systems

Finite-time Safety and Reach-avoid Verification of Stochastic Discrete-time Systems