Abstract:High assurance of information-flow security (IFS) for concurrent systems is challenging. A promising way for formal verification of concurrent systems is the rely-guarantee method. However, existing compositional reasoning approaches for IFS concentrate on language-based IFS. It is often not applicable for system-level security, such as multicore operating system kernels, in which secrecy of actions should also be considered. On the other hand, existing studies on the rely-guarantee method are basically built on concurrent programming languages, by which semantics of concurrent systems cannot be completely captured in a straightforward way. In order to formally verify state-action based IFS for concurrent systems, we propose a rely-guarantee-based compositional reasoning approach for IFS in this paper. We first design a language by incorporating “Event” into concurrent languages and give the IFS semantics of the language. As a primitive element, events offer an extremely neat framework for modeling system and are not necessarily atomic in our language. For compositional reasoning of IFS, we use rely-guarantee specification to define new forms of unwinding conditions (UCs) on events, i.e., event UCs. By a rely-guarantee proof system of the language and the soundness of event UCs, we have that event UCs imply IFS of concurrent systems. In such a way, we relax the atomicity constraint of actions in traditional UCs and provide a compositional reasoning way for IFS in which security proof of systems can be discharged by independent security proof on individual events. Finally, we mechanize the approach in Isabelle/HOL and develop a formal specification and its IFS proof for multicore separation kernels as a study case according to an industrial standard – ARINC 653.

A Parametric Rely-Guarantee Reasoning Framework for Concurrent Reactive Systems.

Applying Rely-Guarantee Reasoning on Concurrent Memory Management and Mailbox in C/OS-II: A Case Study

Applying Rely-Guarantee Reasoning on Concurrent Memory Management and Mailbox in μC/OS-II: A Case Study.

Rely-guarantee Reasoning about Concurrent Reactive Systems: The PiCore Framework, Languages Integration and Applications

An Event-based Compositional Reasoning Approach for Concurrent Reactive Systems.

Rely-guarantee Reasoning about Concurrent Memory Management: Correctness, Safety and Security

More anti-chain based refinement checking

Rely-Guarantee Reasoning for Causally Consistent Shared Memory (Extended Version)

Rely-Guarantee Reasoning About Concurrent Memory Management In Zephyr Rtos

Rely-Guarantee Based Reasoning for Message-Passing Programs

Event-based Compositional Reasoning of Information-Flow Security for Concurrent Systems.

Csimpl: A Rely-Guarantee-Based Framework For Verifying Concurrent Programs

Automated Verification of Reactive and Concurrent Programs by Calculation

Compositional Reasoning for Shared-variable Concurrent Programs.

A Rely-Guarantee-based Simulation for Verifying Concurrent Program Transformations

Modular Reasoning for Message-Passing Programs.

Practical Rely/Guarantee Verification of an Efficient Lock for seL4 on Multicore Architectures

Learning to Prove Safety over Parameterised Concurrent Systems (Full Version)

Enforcing Reactive Noninterference with Reachability Analysis

On Compositional Reasoning for Guaranteeing Probabilistic Properties

Modular Analysis of Distributed Hybrid Systems using Post-Regions (Full Version)