• Aucun résultat trouvé

Operating System Verification for Real Use

N/A
N/A
Protected

Academic year: 2022

Partager "Operating System Verification for Real Use"

Copied!
1
0
0

Texte intégral

(1)

Operating System Verification for Real Use

Gernot Heiser

School of Computer Science and Engineering, University of New South Wales, and Embedded, Real-Time and Operating Systems Program, National ICT Australia

Sydney, Australia gernot@nicta.com.au

Abstract

Software verification remains an academic exercise as long as it focusses on toy problems, such as systems that are too simplified for practical deployment, or perform too poorly. Furthermore, formal verification of software is of limited benefit if the software is deployed in a system where it executes on top of an unverified operating system.

This talk presents an overview of an effort at NICTA which aims to formally verify a complete operating-system kernel, designed for deployment in main- stream embedded systems. It will explain the approach taken to address the con- flicting goals of verifiability, general applicability and high performance. The ker- nel, called seL4, is designed to replace commercially-deployed high-performance L4 microkernels with no more than 10% performance degradation. The project, which has been running since early 2004, is scheduled to complete by the end of this year.

Références

Documents relatifs

Fully Configurable initialization allows you to set the hard disk parameters, specify the size of the UNIX partition, and control the layout of file systems and swap

compatible ctmpuler. The XENIX Operating System is a powerfull)'ltCID of programs that gives your computer the same muhi -user. muhi-lasting capabilities as many large and

If you are going to make a big change in the way a printer is used, such as stopping its ability to handle a certain form, changing the print wheels avail- able for it,

dosls Lists DOS directories and files in a UNIX System format (see Is(C» The -c option causes execution to halt at once if a file on a mounted filesystem is

Now you should copy in the file name, disk address (from your first lookup), length, type, and start address (if needed). This done, call DWRIT to update

This sums up to a novel, tool-supported, integrated test methodology for concurrent OS-system code, ranging from an abstract system model in Isabelle / HOL which was not not authored

• Block: When a thread needs to wait for an event, it will block (saving its user registers, program counter, and stack pointers).The processor may now turn to the execution of

When logical unit CC has its standard device assignment (teletype keyboard) I DBOS indicates the start of a new control command sequence with the message.. DBOS