{"id":"https://openalex.org/W6890094913","doi":"https://doi.org/10.34727/2023/isbn.978-3-85448-060-0_33","title":"Formal Verification of Correctness and Information Flow Security for an In-Order Pipelined Processor","display_name":"Formal Verification of Correctness and Information Flow Security for an In-Order Pipelined Processor","publication_year":2023,"publication_date":"2023-10-01","ids":{"openalex":"https://openalex.org/W6890094913","doi":"https://doi.org/10.34727/2023/isbn.978-3-85448-060-0_33"},"language":"en","primary_location":{"id":"pmh:doi:10.34727/2023/isbn.978-3-85448-060-0_33","doi":null,"is_oa":true,"landing_page_url":"http://hdl.handle.net/20.500.12708/188870","pdf_url":"https://repositum.tuwien.at/bitstream/20.500.12708/188870/1/Dong-2023-Formal%20Verification%20of%20Correctness%20and%20Information%20Flow%20Securit...-vor.pdf","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Inproceedings"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://repositum.tuwien.at/bitstream/20.500.12708/188870/1/Dong-2023-Formal%20Verification%20of%20Correctness%20and%20Information%20Flow%20Securit...-vor.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Dong, Ning","orcid":"https://orcid.org/0000-0002-0629-4439","observed_orcids":["https://orcid.org/0000-0002-0629-4439"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Dong, Ning","raw_affiliation_strings":[],"raw_orcid":"https://orcid.org/0000-0002-0629-4439","affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5084112562","display_name":"Roberto Guanciale","orcid":"https://orcid.org/0000-0002-8069-6495","observed_orcids":["https://orcid.org/0000-0002-8069-6495"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Guanciale, Roberto","raw_affiliation_strings":[],"raw_orcid":"https://orcid.org/0000-0002-8069-6495","affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5023822955","display_name":"Mads Dam","orcid":"https://orcid.org/0000-0001-5432-6442","observed_orcids":["https://orcid.org/0000-0001-5432-6442"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Dam, Mads","raw_affiliation_strings":[],"raw_orcid":"https://orcid.org/0000-0001-5432-6442","affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5064734033","display_name":"Andreas L\u00f6\u00f6w","orcid":"https://orcid.org/0000-0002-9564-4663","observed_orcids":["https://orcid.org/0000-0002-9564-4663"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"L\u00f6\u00f6w, Andreas","raw_affiliation_strings":[],"raw_orcid":"https://orcid.org/0000-0002-9564-4663","affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.8729,"has_fulltext":true,"cited_by_count":5,"citation_normalized_percentile":{"value":0.71990978,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":88,"max":97},"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":true,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.6478999853134155,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.6478999853134155,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10142","display_name":"Formal Methods in Verification","score":0.2190999984741211,"subfield":{"id":"https://openalex.org/subfields/1703","display_name":"Computational Theory and Mathematics"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10126","display_name":"Logic, programming, and type systems","score":0.11079999804496765,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/formal-verification","display_name":"formal verification","score":0.7139999866485596},{"id":"https://openalex.org/keywords/secure-information-flow","display_name":"information flow security","score":0.9589999914169312},{"id":"https://openalex.org/keywords/timing-channels","display_name":"timing channels","score":0.5220000147819519},{"id":"https://openalex.org/keywords/risc","display_name":"RISC","score":0.5619999766349792},{"id":"https://openalex.org/keywords/hol4","display_name":"HOL4","score":0.6460000276565552},{"id":"https://openalex.org/keywords/refinement-relations","display_name":"refinement relations","score":0.7770000100135803}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7667999863624573},{"id":"https://openalex.org/C55439883","wikidata":"https://www.wikidata.org/wiki/Q360812","display_name":"Correctness","level":2,"score":0.7368999719619751},{"id":"https://openalex.org/C111498074","wikidata":"https://www.wikidata.org/wiki/Q173326","display_name":"Formal verification","level":2,"score":0.531000018119812},{"id":"https://openalex.org/C2779136372","wikidata":"https://www.wikidata.org/wiki/Q10283002","display_name":"Information flow","level":2,"score":0.4878999888896942},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.412200003862381},{"id":"https://openalex.org/C3406870","wikidata":"https://www.wikidata.org/wiki/Q6044160","display_name":"Intelligent verification","level":5,"score":0.3472999930381775},{"id":"https://openalex.org/C75606506","wikidata":"https://www.wikidata.org/wiki/Q1049183","display_name":"Formal methods","level":2,"score":0.3456999957561493},{"id":"https://openalex.org/C489000","wikidata":"https://www.wikidata.org/wiki/Q747385","display_name":"Data flow diagram","level":2,"score":0.34299999475479126},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.3425000011920929},{"id":"https://openalex.org/C142284323","wikidata":"https://www.wikidata.org/wiki/Q7921323","display_name":"Verification","level":5,"score":0.34139999747276306},{"id":"https://openalex.org/C96654402","wikidata":"https://www.wikidata.org/wiki/Q5469962","display_name":"Formal equivalence checking","level":3,"score":0.3179999887943268},{"id":"https://openalex.org/C33054407","wikidata":"https://www.wikidata.org/wiki/Q6504747","display_name":"Software verification","level":5,"score":0.3176000118255615},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.3107999861240387},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.3005000054836273},{"id":"https://openalex.org/C38349280","wikidata":"https://www.wikidata.org/wiki/Q1434290","display_name":"Flow (mathematics)","level":2,"score":0.2971999943256378},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.29330000281333923},{"id":"https://openalex.org/C187250869","wikidata":"https://www.wikidata.org/wiki/Q5754573","display_name":"High-level verification","level":5,"score":0.29019999504089355},{"id":"https://openalex.org/C88468194","wikidata":"https://www.wikidata.org/wiki/Q1172416","display_name":"Data-flow analysis","level":3,"score":0.2800999879837036},{"id":"https://openalex.org/C110406131","wikidata":"https://www.wikidata.org/wiki/Q41349","display_name":"Smart card","level":2,"score":0.27959999442100525},{"id":"https://openalex.org/C62460635","wikidata":"https://www.wikidata.org/wiki/Q5508853","display_name":"Functional verification","level":3,"score":0.2718999981880188},{"id":"https://openalex.org/C180198813","wikidata":"https://www.wikidata.org/wiki/Q121182","display_name":"Information system","level":2,"score":0.2703999876976013},{"id":"https://openalex.org/C116253237","wikidata":"https://www.wikidata.org/wiki/Q1437424","display_name":"Formal specification","level":2,"score":0.26919999718666077},{"id":"https://openalex.org/C526435321","wikidata":"https://www.wikidata.org/wiki/Q1303814","display_name":"Processor design","level":2,"score":0.26339998841285706},{"id":"https://openalex.org/C37135326","wikidata":"https://www.wikidata.org/wiki/Q931942","display_name":"Design flow","level":2,"score":0.26080000400543213},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.2547999918460846},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.25200000405311584},{"id":"https://openalex.org/C9652623","wikidata":"https://www.wikidata.org/wiki/Q190109","display_name":"Field (mathematics)","level":2,"score":0.2506999969482422},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.2502000033855438}],"mesh":[],"locations_count":3,"locations":[{"id":"pmh:doi:10.34727/2023/isbn.978-3-85448-060-0_33","doi":null,"is_oa":true,"landing_page_url":"http://hdl.handle.net/20.500.12708/188870","pdf_url":"https://repositum.tuwien.at/bitstream/20.500.12708/188870/1/Dong-2023-Formal%20Verification%20of%20Correctness%20and%20Information%20Flow%20Securit...-vor.pdf","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Inproceedings"},{"id":"pmh:oai:repositum.tuwien.at:20.500.12708/188870","doi":null,"is_oa":true,"landing_page_url":"http://hdl.handle.net/20.500.12708/188870","pdf_url":null,"source":{"id":"https://openalex.org/S4306400493","display_name":"reposiTUm (TU Wien)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I145847075","host_organization_name":"TU Wien","host_organization_lineage":["https://openalex.org/I145847075"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Proceedings of the 23rd Conference on Formal Methods in Computer-Aided Design \u2013 FMCAD 2023","raw_type":"http://purl.org/coar/resource_type/c_5794"},{"id":"doi:10.34727/2023/isbn.978-3-85448-060-0_33","doi":"https://doi.org/10.34727/2023/isbn.978-3-85448-060-0_33","is_oa":true,"landing_page_url":"https://doi.org/10.34727/2023/isbn.978-3-85448-060-0_33","pdf_url":null,"source":{"id":"https://openalex.org/S4306400493","display_name":"reposiTUm (TU Wien)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I145847075","host_organization_name":"TU Wien","host_organization_lineage":["https://openalex.org/I145847075"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Other"}],"best_oa_location":{"id":"pmh:doi:10.34727/2023/isbn.978-3-85448-060-0_33","doi":null,"is_oa":true,"landing_page_url":"http://hdl.handle.net/20.500.12708/188870","pdf_url":"https://repositum.tuwien.at/bitstream/20.500.12708/188870/1/Dong-2023-Formal%20Verification%20of%20Correctness%20and%20Information%20Flow%20Securit...-vor.pdf","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Inproceedings"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W6890094913.pdf","grobid_xml":"https://content.openalex.org/works/W6890094913.grobid-xml"},"referenced_works_count":1,"referenced_works":["https://openalex.org/W4388858498"],"related_works":["https://openalex.org/W7066541961","https://openalex.org/W2481774527","https://openalex.org/W6997071043","https://openalex.org/W6991228183","https://openalex.org/W2116469687","https://openalex.org/W2888048349","https://openalex.org/W6890039465","https://openalex.org/W436632609","https://openalex.org/W7097516096","https://openalex.org/W210405922"],"abstract_inverted_index":{"We":[0],"present":[1],"an":[2],"in-order":[3],"pipelined":[4,43],"processor":[5,15,30,49,80,93,122,135,144],"and":[6,21,45,62,123,139,146],"its":[7,63,100],"verification":[8],"in":[9],"the":[10,17,29,39,42,46,69,74,79,83,113,117,125,128,152],"HOL4":[11,55],"interactive":[12],"theorem":[13],"prover.The":[14],"implements":[16],"RISC":[18],"ISA":[19,114],"Silver":[20,47],"features":[22],"a":[23,35,54,92,108],"general":[24],"5-stage":[25],"pipeline.The":[26],"correctness":[27,64],"of":[28,41,78,87,127],"is":[31,50,65,105,155],"proved":[32],"by":[33,52,81,107],"exhibiting":[34],"refinement":[36,84],"relation":[37],"between":[38],"traces":[40],"circuit":[44,153],"ISA.The":[48],"constructed":[51],"using":[53],"Verilog":[56,70],"library":[57],"for":[58,120,157],"formally":[59],"verified":[60],"hardware,":[61],"guaranteed":[66],"down":[67],"to":[68,132,142],"implementation.Additionally,":[71],"we":[72],"analyze":[73],"information":[75,98,129,148],"flow":[76,130,149],"properties":[77],"utilizing":[82],"relation.The":[85],"notion":[86],"conditional":[88,118],"noninterference":[89,119],"formulates":[90],"that":[91],"should":[94],"not":[95],"leak":[96],"more":[97],"via":[99],"timing":[101],"channel":[102],"than":[103],"what":[104],"expected":[106],"leakage":[109],"model":[110],"expressed":[111],"at":[112,151],"level.We":[115],"establish":[116],"our":[121],"demonstrate":[124],"adaptability":[126],"methodology":[131],"accommodate":[133],"various":[134],"designs,":[136],"attacker":[137],"models,":[138],"environments.Our":[140],"approach":[141],"verify":[143],"implementations":[145],"enable":[147],"analysis":[150],"level":[154],"suitable":[156],"ISAs":[158],"beyond":[159],"Silver.":[160]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":3},{"year":2024,"cited_by_count":1}],"updated_date":"2026-11-07T11:25:07.637180","created_date":"2025-10-10T00:00:00"}