Verifying security invariants in ExpressOS

@inproceedings{Mai2013VerifyingSI,
  title={Verifying security invariants in ExpressOS},
  author={Haohui Mai and Edgar Pek and Hui Xue and Samuel T. King and P. Madhusudan},
  booktitle={ASPLOS},
  year={2013}
}

• Haohui Mai, Edgar Pek, +2 authors P. Madhusudan
• Published 2013 in ASPLOS
• DOI:10.1145/2451116.2451148

Security for applications running on mobile devices is important. In this paper we present ExpressOS, a new OS for enabling high-assurance applications to run on commodity mobile devices securely. Our main contributions are a new OS architecture and our use of formal methods for proving key security invariants about our implementation. In our use of formal methods, we focus solely on proving that our OS implements our security invariants correctly, rather than striving for full functional correctness, requiring significantly less verification effort while still proving the security relevant aspects of our system. We built ExpressOS, analyzed its security, and tested its performance. Our evaluation shows that… CONTINUE READING

Save

Watch Paper

Cite

View on ACM