Design of a Certifying Compiler Supporting Proof of Program Safety

Yiyun Chen,Lin Ge,Baojian Hua,Zhaopeng Li,Cheng Liu

DOI: https://doi.org/10.1109/TASE.2007.19

2007-01-01

Abstract:Symmetry reduction is a technique that can help alleviate the problem of state space explosion in model checking. The idea is to verify only a subset of states from each class (orbit) of symmetric states. This paper presents a framework for symmetry ...

What problem does this paper attempt to address?

Specification-based Test Generation and Optimization Using Model Checking

Hongwei Zeng,Huaikou Miao,Jing Liu

DOI: https://doi.org/10.1109/TASE.2007.46

2007-01-01

Abstract:Symmetry reduction is a technique that can help alleviate the problem of state space explosion in model checking. The idea is to verify only a subset of states from each class (orbit) of symmetric states. This paper presents a framework for symmetry ...
A Formal Verification Method of Compilation Based on C Safety Subset.

Yu Tan,Dianfu Ma,Lei Qiao

DOI: https://doi.org/10.1155/2021/8352267

2021-01-01

Wireless Communications and Mobile Computing

Abstract:With the rapid increase in the number of wireless terminals and the openness of wireless networks, the security of wireless communication is facing serious challenges. The safety and security of computer communication have always been a research hotspot, especially the wireless communication that still has a more complex architecture which leads to more safety problems in the communication system development. In recent years, more and more wireless communication systems are applied in the safety-critical field which tends to need high safety guarantees. A compiler is an important tool for system development, and its safety and reliability have an important impact on the development of safety-critical software. As the strictest method, formal verification methods have been widely paid attention to in compiler verification, but the current formal verification methods have some problems, such as high proof complexity, weak verification ability, and low algorithm efficiency. In this paper, a compiler formal verification method based on safety C subsets is proposed. By abstracting the concept of C grammar units from safety C subsets, the formal verification of the compiler is transformed into the verification of limited C grammar units. In this paper, an axiom system of first-order logic and special axioms are introduced. On this axiom system, the semantic consistency verification of C grammar unit and target code pattern is completed by means of theorem proving, and the formal verification of the compiler is completed.
Automatic Proof Generation for Linear Arithmetic Prover in Certifying Compiler

Si-min YANG,Zhao-peng LI,Zhong ZHUANG,Zhen-ting ZHANG

2011-01-01

Abstract:Recently,as an important way to build high-confidence software,certifying compiler is becoming the research focus of the compiler and formal verification.In its theoretical framework,the compiler proves the verification conditions and generates the machine-checkable proof automatically with automated theorem prover,so a good automated theorem prover is essential for certifying compiler.This paper describes a linear arithmetic prover based on the Simplex algorithm,and proposes an innovative method of proof generation,which is applied to our automated theorem prover to build the Coq-checkable proof.
A Certifying Compiler for Clike Subset of C Language.

Zhaopeng Li,Zhong Zhuang,Yiyun Chen,Simin Yang,Zhenting Zhang,Dawei Fan

DOI: https://doi.org/10.1109/tase.2010.8

2010-01-01

Abstract:Proof-carrying code (PCC) is a technique that allows code consumers to check whether the code is safe to execute or not through a formal safety proof provided by the code producer. And a certifying compiler makes PCC practical by compiling annotated source code into low-level code and proofs. In this paper we present a certifying compiler for a subset of the C programming language, named Clike, with built-in automated theorem provers. Clike programs can be compiled by ANSI C compiler without any modification. Our compiler is intended to deal with data structures such as singly-linked lists, doubly-linked lists and trees. At the source level, we have designed a program logic combining a constrained first-order logic and a fragment of separation logic. We use a verification-condition-based method, and the generated verification conditions are sent to the built-in automated theorem prover. Our prover will generate proof terms when the input formula is valid. The low-level verification framework follows Hoare-style verification methods. The assembly code, its specification and proofs are generated automatically based on a variant of Stack-based Certifying Assembly Programming (SCAP). We implement our certifying compiler prototype in SML/NJ and build our prover libraries using the meta logic provided by Coq. We have used our prototype to successfully certify a considerable number of programs manipulating linked-lists and binary trees.
Self-adaptive Intrusion Detection System for Computational Grid

Jiancheng Ni,Zhishu Li,Jirong Sun,Jianchuan Xing

DOI: https://doi.org/10.1109/TASE.2007.44

2007-01-01

Abstract:Symmetry reduction is a technique that can help alleviate the problem of state space explosion in model checking. The idea is to verify only a subset of states from each class (orbit) of symmetric states. This paper presents a framework for symmetry ...
Design and Implementation of a Certifying Compiler for Type-Based Annotation

胡荣贵,陈意云,郭帆,张昱

2004-01-01

Abstract:The certifying compiler for type-based annotation, which is a key component of the safety infrastructure, can translate programs, written in a type safe subset of the C programming language, into highly optimized Intel x86/linux assembly language programs, and also can produce the assembly language programs with annotation based on type-safety policy. The experiment shows that: (1) it is reliable to translate a type-safe subset of C programming language into annotated Intel x86 assembly language; (2) the certifying compiler is freely able to apply many standard local optimizations; and (3) it can signal a fatal error for the run-time array bound checking. Since the proof system of the safety policy is based on the annotated target code, the certifying compiler thus may be useful in a system for safe mobile code.
Chiefly Symmetric: Results on the Scalability of Probabilistic Model Checking for Operating-System Code

Christel Baier,Marcus Daum,Benjamin Engel,Hermann Härtig,Joachim Klein,Sascha Klüppelholz,Steffen Märcker,Hendrik Tews,Marcus Völp

DOI: https://doi.org/10.4204/EPTCS.102.14

2012-11-27

Abstract:Reliability in terms of functional properties from the safety-liveness spectrum is an indispensable requirement of low-level operating-system (OS) code. However, with evermore complex and thus less predictable hardware, quantitative and probabilistic guarantees become more and more important. Probabilistic model checking is one technique to automatically obtain these guarantees. First experiences with the automated quantitative analysis of low-level operating-system code confirm the expectation that the naive probabilistic model checking approach rapidly reaches its limits when increasing the numbers of processes. This paper reports on our work-in-progress to tackle the state explosion problem for low-level OS-code caused by the exponential blow-up of the model size when the number of processes grows. We studied the symmetry reduction approach and carried out our experiments with a simple test-and-test-and-set lock case study as a representative example for a wide range of protocols with natural inter-process dependencies and long-run properties. We quickly see a state-space explosion for scenarios where inter-process dependencies are insignificant. However, once inter-process dependencies dominate the picture models with hundred and more processes can be constructed and analysed.

Logic in Computer Science,Operating Systems
Improving Combinability of Petri Nets with Inheritance, Aggregation and Association

Shengyuan Wang,Yuan Dong

DOI: https://doi.org/10.1109/TASE.2007.31

2007-01-01

Abstract:Symmetry reduction is a technique that can help alleviate the problem of state space explosion in model checking. The idea is to verify only a subset of states from each class (orbit) of symmetric states. This paper presents a framework for symmetry ...
Verifying Programs Using Abstraction and Theorem Proving.

Junyan Qian,Baowen Xu

2007-01-01

Abstract:we present a methodology for automatically verifying programs against safety specifications based on finite state machine. Firstly, computing the abstract transition between abstract states is done by calling a theorem prover, and then an initial abstract model automatically is extracted from concrete program using predicate abstraction. However, the process of abstraction can be exponential in the number of predicates used. Program slicing, predicate inference and partitioning the set of candidate predicates into subsets make abstract model construction effective. By counterexample-guided abstraction refinement scheme, the abstraction refines incrementally until the specification is either satisfied or refuted. Finally, our methods can be extended to verifying concurrency programs by parallel composition.
Implementation of certifying compiler prototype

LIU Cheng,CHEN Yi-yun,GE Lin,HUA Bao-jian

DOI: https://doi.org/10.3321/j.issn:1002-8331.2007.21.031

2007-01-01

Abstract:Certifying compiler is such a tool coming up with the increasing demands for higher reliability and safety of computer software.It combines the techniques in programming languages and program verifications.This paper describes some details in implementing our prototype of a certifying compiler.
Program Verification By Reduction To Semi-Algebraic Systems Solving

Bican Xia,Lu Yang,Naijun Zhan

DOI: https://doi.org/10.1007/978-3-540-88479-8_20

2008-01-01

Abstract:The discovery of invariants and ranking functions plays a central role in program verification. In our previous work, we investigated invariant generation and non-linear ranking function discovering of polynomial programs by reduction to semi-algebraic systems solving. In this paper we will first summarize our results on the two topics and then show how to generalize the approach to discovering more expressive invariants and ranking functions, and applying to more general programs.
Path Sensitive Program Verification Based on SMT Solvers

HE Yan-Xiang,WU Wei,CHEN Yong,XU Chao

DOI: https://doi.org/10.3724/sp.j.1001.2012.04196

2012-01-01

Journal of Software

Abstract:With the rapid increase in size and complexity of software, more and more attention is paid to the software's trust. Verifying whether programs satisfy the properties described by assertions is a common method to guarantee trust of the software. Since path sensitive program verification cannot traverse all paths, it needs merge the path information, which causes a loss of precision. The study proposes a program verification method using SMT solvers, which can reduce the path search space and improve the precision at the same time. The method's main sprit is impacting the cycle path by using maximal strongly connected component and slicing the CFG according to the aim assertion. The study abstracts the path space using Boolean formulas and verifies the path by combining abstract interpretation and symbolic execution. The study has conducted experiments based on the F-Soft program verification platform and SMT solver Z3, and results show that this method performs well based on precision and effect.
Accelerating Software Model Checking Based on Program Backbone.

Kuanjiu Zhou,Jiawei Yong,Xiaolong Wang,Longtao Ren,Gang Hou,Junwang Chang

DOI: https://doi.org/10.1007/978-3-642-45293-2_26

2013-01-01

Abstract:Model checking technique has been gradually applied to verify the reliability of software systems. However, as to software with large scale and complex structure, the verification procedure suffers from the state space explosion, thus leading to a low efficiency or resource exhaustion. In this paper, we propose a method of accelerating software model checking based on program backbone to verify the properties in ANSI-C source codes. We prune the program with respect to the assertion property, and compress the circular paths by maximal strongly connected components to extract the program backbone. Subsequently, the Hoare theory is used to generate an invariant from the compressed circular nodes, which reduces the length of path encoding. The assertion property is finally translated into a quantifier-free formula and checked for satisfiability by the SMT solver Z3. The experiments show that this method substantially improves the efficiency of program verification.
Verified Compilation for Shared-Memory C

Lennart Beringer,Gordon Stewart,Robert Dockins,Andrew W. Appel

DOI: https://doi.org/10.1007/978-3-642-54833-8_7

2014-01-01

Abstract:We present a new architecture for specifying and proving optimizing compilers in the presence of shared-memory interactions such as buffer-based system calls, shared-memory concurrency, and separate compilation. The architecture, which is implemented in the context of CompCert, includes a novel interaction-oriented model for C-like languages, and a new proof technique, called logical simulation relations, for compositionally proving compiler correctness with respect to this interaction model. We apply our techniques to CompCert’s primary memory-reorganizing compilation phase, Cminorgen. Our results are formalized in Coq, building on the recently released CompCert 2.0.
A proof system for certifying symmetry and optimality reasoning in integer programming

Jasper van Doornmalen,Leon Eifler,Ambros Gleixner,Christopher Hojny

2023-11-08

Abstract:We present a proof system for establishing the correctness of results produced by optimization algorithms, with a focus on mixed-integer programming (MIP). Our system generalizes the seminal work of Bogaerts, Gocht, McCreesh, and Nordström (2022) for binary programs to handle any additional difficulties arising from unbounded and continuous variables, and covers a broad range of solving techniques, including symmetry handling, cutting planes, and presolving reductions. Consistency across all decisions that affect the feasible region is achieved by a pair of transitive relations on the set of solutions, which relies on the newly introduced notion of consistent branching trees. Combined with a series of machine-verifiable derivation rules, the resulting framework offers practical solutions to enhance the trust in integer programming as a methodology for applications where reliability and correctness are key.

Optimization and Control
Safety Verification of State/time-Driven Hybrid Systems Using Barrier Certificates

Wang Guobin,Liu Jing,Sun Haiying,Liu Jie,Ding Zuohua,Zhang Miaomiao

DOI: https://doi.org/10.1109/chicc.2016.7553737

IF: 1.43

2016-01-01

Mathematical Problems in Engineering

Abstract:This paper addresses formal safety verification issue of hybrid systems which resort either state-driven or time-driven strategies. Modeling hybrid systems as linear hybrid automata, we provide a formal method for safety verification by constructing barrier certificates whose existence guarantees the soundness of safety specifications. Barrier certificates for safety of state-driven hybrid systems are presented. Particularly, we propose a formal method for constructing time-dependent barrier certificates and show its sufficiency for safety of time-driven hybrid systems. Through formulating the search of time-dependent barrier certificates as a bilinear sum-of-squares programming problem, a computationally tractable method is proposed to derive a certification on safety in polynomial time. A numerical example illustrates the efficiency of the proposed approach.
Accelerating Hardware Security Verification and Vulnerability Detection Through State Space Reduction.

Lixiang Shen,Dejun Mu,Guo Cao,Maoyuan Qin,Jiacheng Zhu,Wei Hu

DOI: https://doi.org/10.1016/j.cose.2020.102167

IF: 5.105

2021-01-01

Computers & Security

Abstract:Model checking is an effective technique for formal verification of hardware security properties in order to detect security vulnerabilities. However, a major challenge lies in state space explosion. In this work, we propose methods to accelerate hardware security verification and vulnerability detection through state space reduction. Specifically, we reduce state space of formal model by performing value reduction and transition relation reduction. The control flow and data dependent graphs control the process of value reduction and transition relation reduction. In addition, we provide an approach that allows the automated mining of security properties from register-transfer-level hardware designs. Experimental results using Trust-HUB benchmarks have demonstrated that our proposed methods can significantly reduce the complexity of the formal model and thus the formal security verification time for hardware Trojan detection.
Reduction Methods on Probabilistic Control-flow Programs for Reliability Analysis

Clemens Dubslaff,Andrey Morozov,Christel Baier,Klaus Janschek

DOI: https://doi.org/10.48550/arXiv.2004.06637

2020-04-15

Abstract:Modern safety-critical systems are heterogeneous, complex, and highly dynamic. They require reliability evaluation methods that go beyond the classical static methods such as fault trees, event trees, or reliability block diagrams. Promising dynamic reliability analysis methods employ probabilistic model checking on various probabilistic state-based models. However, such methods have to tackle the well-known state-space explosion problem. To compete with this problem, reduction methods such as symmetry reduction and partial-order reduction have been successfully applied to probabilistic models by means of discrete Markov chains or Markov decision processes. Such models are usually specified using probabilistic programs provided in guarded command language. In this paper, we propose two automated reduction methods for probabilistic programs that operate on a purely syntactic level: reset value optimization and register allocation optimization. The presented techniques rely on concepts well known from compiler construction such as live range analysis and register allocation through interference graph coloring. Applied on a redundancy system model for an aircraft velocity control loop modeled in SIMULINK, we show effectiveness of our implementation of the reduction methods. We demonstrate that model-size reductions in three orders of magnitude are possible and show that we can achieve significant speedups for a reliability analysis.

Logic in Computer Science,Performance,Systems and Control
Refinement Through Restraint: Bringing Down the Cost of Verification

Liam O'Connor,Zilin Chen,Christine Rizkallah,Sidney Amani,Japheth Lim,Toby Murray,Yutaka Nagashima,Thomas Sewell,Gerwin Klein

DOI: https://doi.org/10.1145/3022670.2951940

2016-01-01

Abstract:We present a framework aimed at significantly reducing the cost of verifying certain classes of systems software, such as file systems. Our framework allows for equational reasoning about systems code written in our new language, Cogent. Cogent is a restricted, polymorphic, higher-order, and purely functional language with linear types and without the need for a trusted runtime or garbage collector. Linear types allow us to assign two semantics to the language: one imperative, suitable for efficient C code generation; and one functional, suitable for equational reasoning and verification. As Cogent is a restricted language, it is designed to easily interoperate with existing C functions and to connect to existing C verification frameworks. Our framework is based on certifying compilation: For a well-typed Cogent program, our compiler produces C code, a high-level shallow embedding of its semantics in Isabelle/HOL, and a proof that the C code correctly refines this embedding. Thus one can reason about the full semantics of real-world systems code productively and equationally, while retaining the interoperability and leanness of C. The compiler certificate is a series of language-level proofs and per-program translation validation phases, combined into one coherent top-level theorem in Isabelle/HOL.
Csimpl: A Rely-Guarantee-Based Framework For Verifying Concurrent Programs

David Sanán,Yongwang Zhao,Zhe Hou,Fuyuan Zhang,Alwen Tiu,Yang Liu

DOI: https://doi.org/10.1007/978-3-662-54577-5_28

2017-01-01

Abstract:It is essential to deal with the interference of the environment between programs in concurrent program verification. This has led to the development of concurrent program reasoning techniques such as rely-guarantee. However, the source code of the programs to be verified often involves language features such as exceptions and procedures which are not supported by the existing mechanizations of those concurrent reasoning techniques. Schirmer et al. have solved a similar problem for sequential programs by developing a verification framework in the Isabelle/HOL theorem prover called Simpl, which provides a rich sequential language that can encode most of the features in real world programming languages. However Simpl only aims to verify sequential programs, and it does not support the specification nor the verification of concurrent programs. In this paper we introduce CSimpl, an extension of Simpl with concurrency-oriented language features and verification techniques. We prove the compositionality of the CSimpl semantics and we provide inference rules for the language constructors to reason about CSimpl programs using rely-guarantee, showing that the inference rules are sound w.r.t. the language semantics. Finally, we run a case study where we use CSimpl to specify and prove functional correctness of an abstract communication model of the XtratuM partitioning separation micro-kernel.

Design of a Certifying Compiler Supporting Proof of Program Safety

Specification-based Test Generation and Optimization Using Model Checking

A Formal Verification Method of Compilation Based on C Safety Subset.

Automatic Proof Generation for Linear Arithmetic Prover in Certifying Compiler

A Certifying Compiler for Clike Subset of C Language.

Self-adaptive Intrusion Detection System for Computational Grid

Design and Implementation of a Certifying Compiler for Type-Based Annotation

Chiefly Symmetric: Results on the Scalability of Probabilistic Model Checking for Operating-System Code

Improving Combinability of Petri Nets with Inheritance, Aggregation and Association

Verifying Programs Using Abstraction and Theorem Proving.

Implementation of certifying compiler prototype

Program Verification By Reduction To Semi-Algebraic Systems Solving

Path Sensitive Program Verification Based on SMT Solvers

Accelerating Software Model Checking Based on Program Backbone.

Verified Compilation for Shared-Memory C

A proof system for certifying symmetry and optimality reasoning in integer programming

Safety Verification of State/time-Driven Hybrid Systems Using Barrier Certificates

Accelerating Hardware Security Verification and Vulnerability Detection Through State Space Reduction.

Reduction Methods on Probabilistic Control-flow Programs for Reliability Analysis

Refinement Through Restraint: Bringing Down the Cost of Verification

Csimpl: A Rely-Guarantee-Based Framework For Verifying Concurrent Programs