{"id":"https://openalex.org/W1988079752","doi":"https://doi.org/10.1109/sp.2013.35","title":"seL4: From General Purpose to a Proof of Information Flow Enforcement","display_name":"seL4: From General Purpose to a Proof of Information Flow Enforcement","publication_year":2013,"publication_date":"2013-05-01","ids":{"openalex":"https://openalex.org/W1988079752","doi":"https://doi.org/10.1109/sp.2013.35","mag":"1988079752"},"language":"en","primary_location":{"id":"doi:10.1109/sp.2013.35","doi":"https://doi.org/10.1109/sp.2013.35","is_oa":true,"landing_page_url":"https://doi.org/10.1109/sp.2013.35","pdf_url":"https://ieeexplore.ieee.org/ielx7/6547086/6547088/06547124.pdf","source":{"id":"https://openalex.org/S4210233669","display_name":"IEEE Symposium on Security and Privacy (S&P)","issn_l":"1081-6011","issn":["1081-6011","2375-1207"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","norway-2"],"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2013 IEEE Symposium on Security and Privacy","raw_type":"proceedings-article"},"volume":null,"type":"conference-paper","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"bronze","oa_url":"https://ieeexplore.ieee.org/ielx7/6547086/6547088/06547124.pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5043210393","display_name":"Toby Murray","orcid":"https://orcid.org/0000-0002-8271-0289","observed_orcids":["https://orcid.org/0000-0002-8271-0289"]},"institutions":[{"id":"https://openalex.org/I42894916","display_name":"Data61","ror":"https://ror.org/03q397159","country_code":"AU","type":"other","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I42894916","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"T. Murray","raw_affiliation_strings":["Data61, Eveleigh, NSW, AU","NICTA, Sydney, NSW Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Data61, Eveleigh, NSW, AU","institution_ids":["https://openalex.org/I42894916"]},{"raw_affiliation_string":"NICTA, Sydney, NSW Australia","institution_ids":["https://openalex.org/I42894916"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5053173590","display_name":"Daniel Matichuk","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I42894916","display_name":"Data61","ror":"https://ror.org/03q397159","country_code":"AU","type":"other","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I42894916","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"D. Matichuk","raw_affiliation_strings":["NICTA, Australia","NICTA, Sydney, NSW Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"NICTA, Australia","institution_ids":["https://openalex.org/I42894916"]},{"raw_affiliation_string":"NICTA, Sydney, NSW Australia","institution_ids":["https://openalex.org/I42894916"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5074623372","display_name":"Matthew Brassil","orcid":"https://orcid.org/0000-0002-6511-2228","observed_orcids":["https://orcid.org/0000-0002-6511-2228"]},"institutions":[{"id":"https://openalex.org/I42894916","display_name":"Data61","ror":"https://ror.org/03q397159","country_code":"AU","type":"other","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I42894916","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"M. Brassil","raw_affiliation_strings":["NICTA, Australia","NICTA, Sydney, NSW Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"NICTA, Australia","institution_ids":["https://openalex.org/I42894916"]},{"raw_affiliation_string":"NICTA, Sydney, NSW Australia","institution_ids":["https://openalex.org/I42894916"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5022983935","display_name":"Peter Gammie","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I42894916","display_name":"Data61","ror":"https://ror.org/03q397159","country_code":"AU","type":"other","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I42894916","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"P. Gammie","raw_affiliation_strings":["NICTA, Australia","NICTA, Sydney, NSW Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"NICTA, Australia","institution_ids":["https://openalex.org/I42894916"]},{"raw_affiliation_string":"NICTA, Sydney, NSW Australia","institution_ids":["https://openalex.org/I42894916"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5013333702","display_name":"Timothy Bourke","orcid":"https://orcid.org/0000-0003-0601-4182","observed_orcids":["https://orcid.org/0000-0003-0601-4182"]},"institutions":[{"id":"https://openalex.org/I42894916","display_name":"Data61","ror":"https://ror.org/03q397159","country_code":"AU","type":"other","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I42894916","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"T. Bourke","raw_affiliation_strings":["NICTA, Australia","NICTA, Sydney, NSW Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"NICTA, Australia","institution_ids":["https://openalex.org/I42894916"]},{"raw_affiliation_string":"NICTA, Sydney, NSW Australia","institution_ids":["https://openalex.org/I42894916"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5052196572","display_name":"Sean Seefried","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I42894916","display_name":"Data61","ror":"https://ror.org/03q397159","country_code":"AU","type":"other","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I42894916","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"S. Seefried","raw_affiliation_strings":["NICTA, Australia","NICTA, Sydney, NSW Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"NICTA, Australia","institution_ids":["https://openalex.org/I42894916"]},{"raw_affiliation_string":"NICTA, Sydney, NSW Australia","institution_ids":["https://openalex.org/I42894916"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5045808842","display_name":"Corey Lewis","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I42894916","display_name":"Data61","ror":"https://ror.org/03q397159","country_code":"AU","type":"other","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I42894916","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"C. Lewis","raw_affiliation_strings":["NICTA, Australia","NICTA, Sydney, NSW Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"NICTA, Australia","institution_ids":["https://openalex.org/I42894916"]},{"raw_affiliation_string":"NICTA, Sydney, NSW Australia","institution_ids":["https://openalex.org/I42894916"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5072422271","display_name":"Xin Gao","orcid":"https://orcid.org/0000-0002-1183-7223","observed_orcids":["https://orcid.org/0000-0002-1183-7223"]},"institutions":[{"id":"https://openalex.org/I42894916","display_name":"Data61","ror":"https://ror.org/03q397159","country_code":"AU","type":"other","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I42894916","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Xin Gao","raw_affiliation_strings":["NICTA, Australia","NICTA, Sydney, NSW Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"NICTA, Australia","institution_ids":["https://openalex.org/I42894916"]},{"raw_affiliation_string":"NICTA, Sydney, NSW Australia","institution_ids":["https://openalex.org/I42894916"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5056561099","display_name":"Gerwin Klein","orcid":"https://orcid.org/0000-0001-8883-0559","observed_orcids":["https://orcid.org/0000-0001-8883-0559"]},"institutions":[{"id":"https://openalex.org/I42894916","display_name":"Data61","ror":"https://ror.org/03q397159","country_code":"AU","type":"other","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I42894916","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"G. Klein","raw_affiliation_strings":["Data61, Eveleigh, NSW, AU","NICTA, Sydney, NSW Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Data61, Eveleigh, NSW, AU","institution_ids":["https://openalex.org/I42894916"]},{"raw_affiliation_string":"NICTA, Sydney, NSW Australia","institution_ids":["https://openalex.org/I42894916"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I42894916"],"apc_list":null,"apc_paid":null,"fwci":13.4432,"has_fulltext":true,"cited_by_count":211,"citation_normalized_percentile":{"value":0.99429224,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":93,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"415","last_page":"429"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9740999937057495,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9740999937057495,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10126","display_name":"Logic, programming, and type systems","score":0.02199999988079071,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10142","display_name":"Formal Methods in Verification","score":0.0013000000035390258,"subfield":{"id":"https://openalex.org/subfields/1703","display_name":"Computational Theory and Mathematics"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/sel4","display_name":"seL4","score":0.9380000233650208},{"id":"https://openalex.org/keywords/secure-information-flow","display_name":"information flow security","score":0.8529999852180481},{"id":"https://openalex.org/keywords/formal-verification","display_name":"formal verification","score":0.9179999828338623},{"id":"https://openalex.org/keywords/microkernel","display_name":"microkernel","score":0.6859999895095825},{"id":"https://openalex.org/keywords/separation-kernel","display_name":"separation kernel","score":0.890999972820282},{"id":"https://openalex.org/keywords/covert-channels","display_name":"covert channels","score":0.8709999918937683},{"id":"https://openalex.org/keywords/mandatory-access-control","display_name":"mandatory access control","score":0.7099999785423279},{"id":"https://openalex.org/keywords/isolation","display_name":"isolation","score":0.5950000286102295},{"id":"https://openalex.org/keywords/machine-checked-proofs","display_name":"machine-checked proofs","score":0.5920000076293945},{"id":"https://openalex.org/keywords/operating-system-security","display_name":"operating system security","score":0.5299999713897705}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8487985730171204},{"id":"https://openalex.org/C55439883","wikidata":"https://www.wikidata.org/wiki/Q360812","display_name":"Correctness","level":2,"score":0.7130923867225647},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.6225839257240295},{"id":"https://openalex.org/C2779136372","wikidata":"https://www.wikidata.org/wiki/Q10283002","display_name":"Information flow","level":2,"score":0.6003137826919556},{"id":"https://openalex.org/C108710211","wikidata":"https://www.wikidata.org/wiki/Q11538","display_name":"Mathematical proof","level":2,"score":0.5791831016540527},{"id":"https://openalex.org/C160191386","wikidata":"https://www.wikidata.org/wiki/Q868299","display_name":"Control flow","level":2,"score":0.4887089729309082},{"id":"https://openalex.org/C206880738","wikidata":"https://www.wikidata.org/wiki/Q431667","display_name":"Automated theorem proving","level":2,"score":0.4862038493156433},{"id":"https://openalex.org/C203265346","wikidata":"https://www.wikidata.org/wiki/Q11387554","display_name":"Proof assistant","level":3,"score":0.46770235896110535},{"id":"https://openalex.org/C29024540","wikidata":"https://www.wikidata.org/wiki/Q1476964","display_name":"Covert channel","level":5,"score":0.44678249955177307},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.4443919360637665},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.42070674896240234},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.4086712598800659},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3673369884490967},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.15063521265983582},{"id":"https://openalex.org/C103377522","wikidata":"https://www.wikidata.org/wiki/Q3493999","display_name":"Security information and event management","level":4,"score":0.08908283710479736},{"id":"https://openalex.org/C184842701","wikidata":"https://www.wikidata.org/wiki/Q370563","display_name":"Cloud computing security","level":3,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C2524010","wikidata":"https://www.wikidata.org/wiki/Q8087","display_name":"Geometry","level":1,"score":0.0},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/sp.2013.35","doi":"https://doi.org/10.1109/sp.2013.35","is_oa":true,"landing_page_url":"https://doi.org/10.1109/sp.2013.35","pdf_url":"https://ieeexplore.ieee.org/ielx7/6547086/6547088/06547124.pdf","source":{"id":"https://openalex.org/S4210233669","display_name":"IEEE Symposium on Security and Privacy (S&P)","issn_l":"1081-6011","issn":["1081-6011","2375-1207"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","norway-2"],"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2013 IEEE Symposium on Security and Privacy","raw_type":"proceedings-article"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.380.8505","doi":null,"is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.380.8505","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://www.nicta.com.au/pub?doc=6464","raw_type":"text"},{"id":"pmh:oai:jupiter.its.unimelb.edu.au:11343/91747","doi":null,"is_oa":false,"landing_page_url":"http://gateway.webofknowledge.com/gateway/Gateway.cgi?GWVersion=2&SrcApp=PARTNER_APP&SrcAuth=LinksAMR&KeyUT=WOS:000326249300027&DestLinkType=FullRecord&DestApp=ALL_WOS&UsrCustomerID=d4d813f4571fa7d6246bdc0dfeca3a1c","pdf_url":null,"source":{"id":"https://openalex.org/S4377196259","display_name":"Minerva Access (University of Melbourne)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I165779595","host_organization_name":"The University of Melbourne","host_organization_lineage":["https://openalex.org/I165779595"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"2013 IEEE Symposium on Security and Privacy (SP)","raw_type":"Conference Paper"}],"best_oa_location":{"id":"doi:10.1109/sp.2013.35","doi":"https://doi.org/10.1109/sp.2013.35","is_oa":true,"landing_page_url":"https://doi.org/10.1109/sp.2013.35","pdf_url":"https://ieeexplore.ieee.org/ielx7/6547086/6547088/06547124.pdf","source":{"id":"https://openalex.org/S4210233669","display_name":"IEEE Symposium on Security and Privacy (S&P)","issn_l":"1081-6011","issn":["1081-6011","2375-1207"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","norway-2"],"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2013 IEEE Symposium on Security and Privacy","raw_type":"proceedings-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320315885","display_name":"Australian Government","ror":"https://ror.org/0314h5y94"},{"id":"https://openalex.org/F4320334704","display_name":"Australian Research Council","ror":"https://ror.org/05mmh0f86"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W1988079752.pdf","grobid_xml":"https://content.openalex.org/works/W1988079752.grobid-xml"},"referenced_works_count":54,"referenced_works":["https://openalex.org/W43313067","https://openalex.org/W51058944","https://openalex.org/W55413947","https://openalex.org/W69090831","https://openalex.org/W140235344","https://openalex.org/W755061677","https://openalex.org/W1523068243","https://openalex.org/W1525928249","https://openalex.org/W1552921094","https://openalex.org/W1568755417","https://openalex.org/W1581993637","https://openalex.org/W1594455430","https://openalex.org/W1848210326","https://openalex.org/W1867052887","https://openalex.org/W1937179622","https://openalex.org/W1971880096","https://openalex.org/W2014942166","https://openalex.org/W2019404692","https://openalex.org/W2035142022","https://openalex.org/W2039881954","https://openalex.org/W2048500751","https://openalex.org/W2093852121","https://openalex.org/W2095762545","https://openalex.org/W2099321325","https://openalex.org/W2106192381","https://openalex.org/W2113350481","https://openalex.org/W2117181435","https://openalex.org/W2118341398","https://openalex.org/W2121001711","https://openalex.org/W2122049982","https://openalex.org/W2126823808","https://openalex.org/W2130970533","https://openalex.org/W2131726714","https://openalex.org/W2132107743","https://openalex.org/W2133281166","https://openalex.org/W2136310957","https://openalex.org/W2141890389","https://openalex.org/W2146530476","https://openalex.org/W2149996206","https://openalex.org/W2150210903","https://openalex.org/W2155146646","https://openalex.org/W2162553649","https://openalex.org/W2194489287","https://openalex.org/W2226445952","https://openalex.org/W2515724643","https://openalex.org/W3144368627","https://openalex.org/W4210886820","https://openalex.org/W4232666937","https://openalex.org/W4243947286","https://openalex.org/W4246472322","https://openalex.org/W4249212548","https://openalex.org/W4254136620","https://openalex.org/W6602062448","https://openalex.org/W6622275354"],"related_works":["https://openalex.org/W2163347957","https://openalex.org/W4386766752","https://openalex.org/W1888392380","https://openalex.org/W4385730970","https://openalex.org/W7096681121","https://openalex.org/W2076409494","https://openalex.org/W7095356685","https://openalex.org/W1975091280","https://openalex.org/W1505972073","https://openalex.org/W69525393"],"abstract_inverted_index":{"In":[0],"contrast":[1],"to":[2,22,56,120,156,159,161],"testing,":[3],"mathematical":[4],"reasoning":[5],"and":[6,68,90,109,123,171],"formal":[7,183],"verification":[8,29],"can":[9],"show":[10],"the":[11,35,57,72,113,130,143,152,168,182],"absence":[12],"of":[13,16,30,37,46,62,74,85,102,139,173],"whole":[14],"classes":[15],"security":[17,33,49,133],"vulnerabilities.":[18],"We":[19,82,93,128,166],"present":[20],"the,":[21],"our":[23],"knowledge,":[24],"first":[25],"complete,":[26],"formal,":[27],"machine-checked":[28],"information":[31,47,125,131],"flow":[32,48,126,132],"for":[34,50],"implementation":[36,77],"a":[38,106],"general-purpose":[39],"microkernel;":[40],"namely":[41],"seL4.":[42],"Unlike":[43],"previous":[44],"proofs":[45],"operating":[51],"system":[52],"kernels,":[53],"ours":[54],"applies":[55],"actual":[58],"8,":[59],"830":[60],"lines":[61],"C":[63],"code":[64],"that":[65,154],"implement":[66],"seL4,":[67],"so":[69],"rules":[70],"out":[71],"possibility":[73],"invalidation":[75],"by":[76,181],"errors":[78],"in":[79],"this":[80,174],"code.":[81,92],"assume":[83],"correctness":[84],"compiler,":[86],"assembly":[87],"code,":[88],"hardware,":[89],"boot":[91],"prove":[94],"everything":[95],"else.":[96],"This":[97],"proof":[98],"is":[99],"strong":[100],"evidence":[101],"seL4's":[103],"utility":[104],"as":[105,149,151],"separation":[107],"kernel,":[108],"describes":[110],"precisely":[111],"how":[112],"general":[114],"purpose":[115],"kernel":[116],"should":[117],"be":[118,157],"configured":[119],"enforce":[121],"isolation":[122],"mandatory":[124],"control.":[127],"describe":[129],"statement":[134],"we":[135],"proved":[136],"(a":[137],"variant":[138],"intransitive":[140],"noninterference),":[141],"including":[142,176],"assumptions":[144],"on":[145],"which":[146],"it":[147,163],"rests,":[148],"well":[150],"modifications":[153],"had":[155],"made":[158],"seL4":[160],"ensure":[162],"was":[164],"enforced.":[165],"discuss":[167],"practical":[169],"limitations":[170],"implications":[172],"result,":[175],"covert":[177],"channels":[178],"not":[179],"covered":[180],"proof.":[184]},"counts_by_year":[{"year":2026,"cited_by_count":7},{"year":2025,"cited_by_count":8},{"year":2024,"cited_by_count":10},{"year":2023,"cited_by_count":14},{"year":2022,"cited_by_count":9},{"year":2021,"cited_by_count":14},{"year":2020,"cited_by_count":16},{"year":2019,"cited_by_count":11},{"year":2018,"cited_by_count":17},{"year":2017,"cited_by_count":32},{"year":2016,"cited_by_count":24},{"year":2015,"cited_by_count":17},{"year":2014,"cited_by_count":18},{"year":2013,"cited_by_count":12},{"year":2012,"cited_by_count":2}],"updated_date":"2026-11-07T11:25:07.637180","created_date":"2016-06-24T00:00:00"}