{"id":"https://openalex.org/W1975091280","doi":"https://doi.org/10.1145/2508859.2516702","title":"Formal verification of information flow security for a simple arm-based separation kernel","display_name":"Formal verification of information flow security for a simple arm-based separation kernel","publication_year":2013,"publication_date":"2013-01-01","ids":{"openalex":"https://openalex.org/W1975091280","doi":"https://doi.org/10.1145/2508859.2516702","mag":"1975091280"},"language":"en","primary_location":{"id":"doi:10.1145/2508859.2516702","is_oa":true,"landing_page_url":"https://doi.org/10.1145/2508859.2516702","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/2508859.2516702","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2013 ACM SIGSAC conference on Computer & communications security - CCS '13","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/2508859.2516702","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5023822955","display_name":"Mads Dam","orcid":"https://orcid.org/0000-0001-5432-6442"},"institutions":[{"id":"https://openalex.org/I86987016","display_name":"KTH Royal Institute of Technology","ror":"https://ror.org/026vcq606","country_code":"SE","type":"education","lineage":["https://openalex.org/I86987016"]}],"countries":["SE"],"is_corresponding":false,"raw_author_name":"Mads Dam","raw_affiliation_strings":["KTH Royal Institute of Technology, Stockholm, Sweden","KTH Royal Institute of Technology; Stockholm Sweden"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"KTH Royal Institute of Technology, Stockholm, Sweden","institution_ids":["https://openalex.org/I86987016"]},{"raw_affiliation_string":"KTH Royal Institute of Technology; Stockholm Sweden","institution_ids":["https://openalex.org/I86987016"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5084112562","display_name":"Roberto Guanciale","orcid":"https://orcid.org/0000-0002-8069-6495"},"institutions":[{"id":"https://openalex.org/I86987016","display_name":"KTH Royal Institute of Technology","ror":"https://ror.org/026vcq606","country_code":"SE","type":"education","lineage":["https://openalex.org/I86987016"]}],"countries":["SE"],"is_corresponding":false,"raw_author_name":"Roberto Guanciale","raw_affiliation_strings":["KTH Royal Institute of Technology, Stockholm, Sweden","KTH Royal Institute of Technology; Stockholm Sweden"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"KTH Royal Institute of Technology, Stockholm, Sweden","institution_ids":["https://openalex.org/I86987016"]},{"raw_affiliation_string":"KTH Royal Institute of Technology; Stockholm Sweden","institution_ids":["https://openalex.org/I86987016"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5080062466","display_name":"Narges Khakpour","orcid":"https://orcid.org/0000-0002-0377-5595"},"institutions":[{"id":"https://openalex.org/I86987016","display_name":"KTH Royal Institute of Technology","ror":"https://ror.org/026vcq606","country_code":"SE","type":"education","lineage":["https://openalex.org/I86987016"]}],"countries":["SE"],"is_corresponding":false,"raw_author_name":"Narges Khakpour","raw_affiliation_strings":["KTH Royal Institute of Technology, Stockholm, Sweden","KTH Royal Institute of Technology; Stockholm Sweden"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"KTH Royal Institute of Technology, Stockholm, Sweden","institution_ids":["https://openalex.org/I86987016"]},{"raw_affiliation_string":"KTH Royal Institute of Technology; Stockholm Sweden","institution_ids":["https://openalex.org/I86987016"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5084522176","display_name":"Hamed Nemati","orcid":"https://orcid.org/0000-0001-9251-3679"},"institutions":[{"id":"https://openalex.org/I86987016","display_name":"KTH Royal Institute of Technology","ror":"https://ror.org/026vcq606","country_code":"SE","type":"education","lineage":["https://openalex.org/I86987016"]}],"countries":["SE"],"is_corresponding":false,"raw_author_name":"Hamed Nemati","raw_affiliation_strings":["KTH Royal Institute of Technology, Stockholm, Sweden","KTH Royal Institute of Technology; Stockholm Sweden"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"KTH Royal Institute of Technology, Stockholm, Sweden","institution_ids":["https://openalex.org/I86987016"]},{"raw_affiliation_string":"KTH Royal Institute of Technology; Stockholm Sweden","institution_ids":["https://openalex.org/I86987016"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5007001298","display_name":"Oliver Schwarz","orcid":"https://orcid.org/0000-0003-3434-5640"},"institutions":[{"id":"https://openalex.org/I4210160701","display_name":"Kista Photonics Research Center","ror":"https://ror.org/05j59av97","country_code":"SE","type":"facility","lineage":["https://openalex.org/I4210160701"]}],"countries":["SE"],"is_corresponding":false,"raw_author_name":"Oliver Schwarz","raw_affiliation_strings":["SICS Swedish ICT, Kista, Sweden"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"SICS Swedish ICT, Kista, Sweden","institution_ids":["https://openalex.org/I4210160701"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":6.2047,"has_fulltext":true,"cited_by_count":74,"citation_normalized_percentile":{"value":0.97385915,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"223","last_page":"234"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10054","display_name":"Parallel Computing and Optimization Techniques","score":0.9976000189781189,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10772","display_name":"Distributed systems and fault tolerance","score":0.9969000220298767,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8465666770935059},{"id":"https://openalex.org/keywords/correctness","display_name":"Correctness","score":0.7953395843505859},{"id":"https://openalex.org/keywords/kernel","display_name":"Kernel (algebra)","score":0.5753210186958313},{"id":"https://openalex.org/keywords/information-flow","display_name":"Information flow","score":0.5610647201538086},{"id":"https://openalex.org/keywords/simple","display_name":"Simple (philosophy)","score":0.5371390581130981},{"id":"https://openalex.org/keywords/formal-verification","display_name":"Formal verification","score":0.5085920095443726},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.49021703004837036},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.47619426250457764},{"id":"https://openalex.org/keywords/runtime-verification","display_name":"Runtime verification","score":0.4234510362148285},{"id":"https://openalex.org/keywords/isolation","display_name":"Isolation (microbiology)","score":0.4172302186489105},{"id":"https://openalex.org/keywords/separation-logic","display_name":"Separation logic","score":0.4166976809501648},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.3348202705383301}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8465666770935059},{"id":"https://openalex.org/C55439883","wikidata":"https://www.wikidata.org/wiki/Q360812","display_name":"Correctness","level":2,"score":0.7953395843505859},{"id":"https://openalex.org/C74193536","wikidata":"https://www.wikidata.org/wiki/Q574844","display_name":"Kernel (algebra)","level":2,"score":0.5753210186958313},{"id":"https://openalex.org/C2779136372","wikidata":"https://www.wikidata.org/wiki/Q10283002","display_name":"Information flow","level":2,"score":0.5610647201538086},{"id":"https://openalex.org/C2780586882","wikidata":"https://www.wikidata.org/wiki/Q7520643","display_name":"Simple (philosophy)","level":2,"score":0.5371390581130981},{"id":"https://openalex.org/C111498074","wikidata":"https://www.wikidata.org/wiki/Q173326","display_name":"Formal verification","level":2,"score":0.5085920095443726},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.49021703004837036},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.47619426250457764},{"id":"https://openalex.org/C202973057","wikidata":"https://www.wikidata.org/wiki/Q7380130","display_name":"Runtime verification","level":3,"score":0.4234510362148285},{"id":"https://openalex.org/C2775941552","wikidata":"https://www.wikidata.org/wiki/Q25212305","display_name":"Isolation (microbiology)","level":2,"score":0.4172302186489105},{"id":"https://openalex.org/C173856430","wikidata":"https://www.wikidata.org/wiki/Q3257964","display_name":"Separation logic","level":2,"score":0.4166976809501648},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.3348202705383301},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C89423630","wikidata":"https://www.wikidata.org/wiki/Q7193","display_name":"Microbiology","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C114614502","wikidata":"https://www.wikidata.org/wiki/Q76592","display_name":"Combinatorics","level":1,"score":0.0},{"id":"https://openalex.org/C111472728","wikidata":"https://www.wikidata.org/wiki/Q9471","display_name":"Epistemology","level":1,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1145/2508859.2516702","is_oa":true,"landing_page_url":"https://doi.org/10.1145/2508859.2516702","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/2508859.2516702","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2013 ACM SIGSAC conference on Computer & communications security - CCS '13","raw_type":"proceedings-article"},{"id":"pmh:oai:DiVA.org:kth-136348","is_oa":true,"landing_page_url":"http://urn.kb.se/resolve?urn=urn:nbn:se:kth:diva-136348","pdf_url":null,"source":{"id":"https://openalex.org/S4306401559","display_name":"KTH Publication Database DiVA (KTH Royal Institute of Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I86987016","host_organization_name":"KTH Royal Institute of Technology","host_organization_lineage":["https://openalex.org/I86987016"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"info:eu-repo/semantics/conferenceObject"},{"id":"pmh:oai:DiVA.org:ri-24266","is_oa":true,"landing_page_url":"http://urn.kb.se/resolve?urn=urn:nbn:se:ri:diva-24266","pdf_url":null,"source":{"id":"https://openalex.org/S4306400653","display_name":"Diva portal (Dalarna University Library)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"info:eu-repo/semantics/conferenceObject"}],"best_oa_location":{"id":"doi:10.1145/2508859.2516702","is_oa":true,"landing_page_url":"https://doi.org/10.1145/2508859.2516702","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/2508859.2516702","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2013 ACM SIGSAC conference on Computer & communications security - CCS '13","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G6529328261","display_name":null,"funder_award_id":"IT 2010","funder_id":"https://openalex.org/F4320320940","funder_display_name":"Stiftelsen f\u00f6r\u00a0Strategisk Forskning"}],"funders":[{"id":"https://openalex.org/F4320320940","display_name":"Stiftelsen f\u00f6r\u00a0Strategisk Forskning","ror":"https://ror.org/044wr7g58"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W1975091280.pdf","grobid_xml":"https://content.openalex.org/works/W1975091280.grobid-xml"},"referenced_works_count":32,"referenced_works":["https://openalex.org/W6904734","https://openalex.org/W17195072","https://openalex.org/W43313067","https://openalex.org/W55413947","https://openalex.org/W140235344","https://openalex.org/W205804942","https://openalex.org/W369805404","https://openalex.org/W1540575800","https://openalex.org/W1613874182","https://openalex.org/W1699577049","https://openalex.org/W1863850585","https://openalex.org/W1977764760","https://openalex.org/W1988079752","https://openalex.org/W1992291252","https://openalex.org/W2028928241","https://openalex.org/W2039881954","https://openalex.org/W2095762545","https://openalex.org/W2125737450","https://openalex.org/W2126823808","https://openalex.org/W2129487583","https://openalex.org/W2133281166","https://openalex.org/W2136310957","https://openalex.org/W2150210903","https://openalex.org/W2203657859","https://openalex.org/W3009611060","https://openalex.org/W4239392788","https://openalex.org/W4246472322","https://openalex.org/W6600698099","https://openalex.org/W6605686654","https://openalex.org/W6657649694","https://openalex.org/W6679162426","https://openalex.org/W6687977817"],"related_works":["https://openalex.org/W2406499533","https://openalex.org/W1561702747","https://openalex.org/W2809618173","https://openalex.org/W2111870610","https://openalex.org/W3036403349","https://openalex.org/W1968510839","https://openalex.org/W4233335757","https://openalex.org/W2108824981","https://openalex.org/W2950360254","https://openalex.org/W4375857205"],"abstract_inverted_index":{"A":[0],"separation":[1,35],"kernel":[2,36,44,95],"simulates":[3],"a":[4,8,25,33,70,91,104,123],"distributed":[5],"environment":[6],"using":[7],"single":[9],"physical":[10],"machine":[11],"by":[12,51],"executing":[13],"partitions":[14,76],"in":[15,86,136,149],"isolation":[16],"and":[17,54,80,107],"appropriately":[18],"controlling":[19],"communication":[20,47,74,142],"among":[21],"them.":[22],"We":[23,68],"present":[24],"formal":[26],"verification":[27,108,146,160],"of":[28,89,109,118,155,170],"information":[29,42,82],"flow":[30,43,83],"security":[31,45,130],"for":[32,37],"simple":[34],"ARMv7.":[38],"Previous":[39],"work":[40],"on":[41,162],"leaves":[46],"to":[48,58,134,167],"be":[49,56],"handled":[50],"model-external":[52],"means,":[53],"cannot":[55],"used":[57],"draw":[59],"conclusions":[60],"when":[61],"there":[62],"is":[63,77,84,132,147],"explicit":[64,79],"interaction":[65],"between":[66,75],"partitions.":[67],"propose":[69],"different":[71],"approach":[72],"where":[73,140],"made":[78],"the":[81,87,94,110,116,119,129,137,152,163,171],"analyzed":[85],"presence":[88],"such":[90],"channel.":[92],"Limiting":[93],"functionality":[96],"as":[97,99,157],"much":[98],"meaningfully":[100],"possible,":[101],"we":[102,126],"accomplish":[103],"detailed":[105],"analysis":[106,174],"system,":[111],"proving":[112],"its":[113],"correctness":[114],"at":[115,177],"level":[117],"ARMv7":[120],"assembly.":[121],"As":[122],"sanity":[124],"check":[125],"show":[127],"how":[128],"condition":[131],"reduced":[133],"noninterference":[135],"special":[138],"case":[139],"no":[141],"takes":[143],"place.":[144],"The":[145],"done":[148],"HOL4":[150],"taking":[151],"Cambridge":[153],"model":[154],"ARM":[156],"basis,":[158],"transferring":[159],"tasks":[161],"actual":[164],"assembly":[165],"code":[166],"an":[168],"adaptation":[169],"BAP":[172],"binary":[173],"tool":[175],"developed":[176],"CMU.":[178]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":7},{"year":2022,"cited_by_count":3},{"year":2021,"cited_by_count":5},{"year":2020,"cited_by_count":10},{"year":2019,"cited_by_count":4},{"year":2018,"cited_by_count":5},{"year":2017,"cited_by_count":7},{"year":2016,"cited_by_count":10},{"year":2015,"cited_by_count":3},{"year":2014,"cited_by_count":12},{"year":2013,"cited_by_count":2}],"updated_date":"2026-08-26T07:47:46.906454","created_date":"2025-10-10T00:00:00"}