The Experts below are selected from a list of 23043 Experts worldwide ranked by ideXlab platform

Jin-young Choi - One of the best experts on this subject based on the ideXlab platform.

  • Formal Embedded Operating System Model Based on Resource-Based Design Framework
    Seventh International Conference on Quality Software (QSIC 2007), 2007
    Co-Authors: Jin-young Choi
    Abstract:

    Embedded Operating System(OS) is one of most critical software in safety-critical Systems. To certify it to a certification organization, it is recommended that specifications for Systems are formally described nowadays. This paper introduces an executable model of Embedded real-time OS of which purpose is to certify an Embedded OS, called pCOS, to a certification organization in Korean nuclear society. The behavioral model of Embedded OS is built by a design framework, called resource-oriented design. In this framework, we would aim at capturing the behavioral models of Embedded OS requirement and design separately and verifying them incrementally from functionality and hardware's constraints. By means of resource-oriented design, we can identify the property of hardware resources and acquire a formally verifiable and executable model of Embedded OS that can be a proof of its safety.

Thorsten Bormer - One of the best experts on this subject based on the ideXlab platform.

  • formal verification of a microkernel used in dependable software Systems
    International Conference on Computer Safety Reliability and Security, 2009
    Co-Authors: Christoph Baumann, Bernhard Beckert, Holger Blasum, Thorsten Bormer
    Abstract:

    In recent years, deductive program verification has improved to a degree that makes it feasible for real-world programs. Following this observation, the main goal of the BMBF-supported Verisoft XT project is (a) the creation of methods and tools which allow the pervasive formal verification of integrated computer Systems, and (b) the prototypical realization of four concrete, industrial application tasks. In this paper, we report on the Verisoft XT subproject Avionics, where formal verification is being applied to a commercial Embedded Operating System. The goal is to use deductive techniques to verify functional correctness of the PikeOS System, which is a microkernel-based partitioning hypervisor. We present our approach to verifying the microkernel's System calls, using a System call for changing the priority of threads as an example. In particular, (a) we give an overview of the tool chain and the verification methodology, (b) we explain the hardware model and how assembly semantics is specified so that functions whose implementation contain assembly can be verified, and (c) we describe the verification of the System call itself.

Akinori Yonezawa - One of the best experts on this subject based on the ideXlab platform.

  • formal verification of the heap manager of an Operating System using separation logic
    Lecture Notes in Computer Science, 2006
    Co-Authors: Nicolas Marti, Reynald Affeldt, Akinori Yonezawa
    Abstract:

    In order to ensure memory properties of an Operating System, it is important to verify the implementation of its heap manager. In the case of an existing Operating System, this is a difficult task because the heap manager is usually written in a low-level language that makes use of pointers, and it is usually not written with verification in mind. In this paper, our main contribution is the formal verification of the heap manager of an existing Embedded Operating System, namely Topsy. For this purpose, we develop in the Coq proof assistant a library for separation logic, an extension of Hoare logic to deal with pointers. Using this library, we were able to verify the C source code of the Topsy heap manager, and to find and correct bugs.

Christine Paulinmohring - One of the best experts on this subject based on the ideXlab platform.

  • formal verification of security properties of smart card Embedded source code
    Lecture Notes in Computer Science, 2005
    Co-Authors: June Andronick, Boutheina Chetali, Christine Paulinmohring
    Abstract:

    This paper reports on a method to handle the verification of various security properties of imperative source code Embedded on smart cards. The idea is to combine two program verification approaches: the functional verification at the source code level and the verification of high level properties on a formal model built from the program and its specification. The method presented uses the Caduceus tool, built on top of the Why tool. Caduceus enables the verification of an annotated C program and provides a validation process that we used to generate a high level formal model of the C source code. This method is illustrated by an example extracted from the verification of a smart card Embedded Operating System.

Hy Hsu - One of the best experts on this subject based on the ideXlab platform.

  • A Platform for Supporting Dynamic Update and Resource Protection in an Embedded Operating System
    INST INFORMATION SCIENCE, 2020
    Co-Authors: Hy Hsu
    Abstract:

    [[abstract]]Recently, many researches focus on providing dynamic update functionality in Embedded Systems since dynamic update allows a System to enhance or update its functionality even without the need of rebooting the whole System or stopping System services. Dynamic update thus provides more flexibility in the development of Embedded Systems. However, an incautiously developed component once downloaded may corrupt the System or waste System resources. Because Embedded Systems' resources are usually limited, protecting System resources against erroneous components is very important, especially in the Systems providing dynamic update. In this paper, we have implemented a platform which supports a remote component update mechanism for dynamically upgrading an Embedded Operating System at run time. Besides, a System resource protection mechanism is implemented for protecting System resources against downloaded un-trusted components. If our System detects misuses of System resources from an erroneous component, it will reclaim the wasted resources and remove the erroneous component out of our Embedded client. Currently, our protection mechanism can reclaim lost memory space, ensure the normal execution of critical sections, and prevent null pointer access. The experimental results demonstrate that our platform can effectively support dynamic remote update and prevent incautiously developed components to misuse System resources with only little extra overhead.[[note]]SC