Proof of OS scheduling behavior in the presence of interrupt-induced concurrency

J Andronick, C Lewis, D Matichuk, C Morgan… - … on Interactive Theorem …, 2016 - Springer
We present a simple yet scalable framework for formal reasoning and machine-assisted
proof of interrupt-driven concurrency in operating-system code, and use it to prove the …

Designing a future airborne capability environment (FACE) hypervisor for safety and security

SH VanderLeest - 2017 IEEE/AIAA 36th Digital Avionics …, 2017 - ieeexplore.ieee.org
A partitioning environment is one of the components of an avionics architecture aligned with
the Future Airborne Capability Environment (FACE™). In this paper, we explore the design …

[HTML][HTML] Formally verifying FreeRTOS'interprocess communication mechanism

N Chong, B Jacobs - 2021 - amazon.science
FreeRTOS is a real-time kernel and set of libraries for Internet of Things (IoT) applications.
The FreeRTOS kernel provides a portable abstraction layer, task scheduling and …

The open source, formally-proven seL4 microkernel: considerations for use in avionics

SH VanderLeest - 2016 IEEE/AIAA 35th Digital Avionics …, 2016 - ieeexplore.ieee.org
Mixed criticality functions integrated on a single computing platform require special attention
to safety and security. ARINC 653 and DO-248 provide guidelines for partitioning software …

A verified POSIX-compliant flash file system-modular verification technology & crash tolerance

G Ernst - 2017 - opus.bibliothek.uni-augsburg.de
In the Flashix project, a le system for ash memory has been developed. It is proven
functionally correct and tolerates system crashes such as abrupt power cuts at any point in …

Formal methods by stealth: The INSPEX experience

R Banach, J Razavi, O Debicki… - Journal of Software …, 2021 - Wiley Online Library
INSPEX is an INtegrated Smart sPatial EXploration system. It relies on a family of sensors,
like automated vehicles do, to provide enough information to a digital system for it to make …

Analyzing FreeRTOS Scheduling Behaviors with the Spin Model Checker

CK Lin, BY Wang - arXiv preprint arXiv:2205.07480, 2022 - arxiv.org
FreeRTOS is a real-time operating system with configurable scheduling policies. Its
portability and configurability make FreeRTOS one of the most popular real-time operating …

Formal Methods in Systems Integration: Deployment of Formal Techniques in INSPEX

R Banach, J Razavi, S Lesecq, O Debicki… - … Systems Design & …, 2019 - Springer
Inspired by the abilities of contemporary autonomous vehicles to navigate with a high
degree of effectiveness, the INSPEX Project aims to create a minaturised smart obstacle …

Scaling Up Automated Verification: A Case Study and a Formalization IDE for Building High Integrity Software

DT Welch - 2019 - search.proquest.com
Component-based software verification is a difficult challenge because developers must
specify components formally and annotate implementations with suitable assertions that are …

Exploring Applications of Formal Methods in the INSPEX Project

J Razavi, R Banach, O Debicki, N Mareau… - … and Foundations: STAF …, 2018 - Springer
As formal methods become increasingly practical, there is a need to explore their use in a
variety of domains. Wearable sensing is a rapidly developing area in which formal methods …