{"id":"https://openalex.org/W2975647263","doi":"https://doi.org/10.1145/3356903","title":"Building certified concurrent OS kernels","display_name":"Building certified concurrent OS kernels","publication_year":2019,"publication_date":"2019-09-24","ids":{"openalex":"https://openalex.org/W2975647263","doi":"https://doi.org/10.1145/3356903","mag":"2975647263"},"language":"en","primary_location":{"id":"doi:10.1145/3356903","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3356903","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3356903","source":{"id":"https://openalex.org/S103482838","display_name":"Communications of the ACM","issn_l":"0001-0782","issn":["0001-0782","1557-7317"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Communications of the ACM","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"bronze","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3356903","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5000031216","display_name":"Ronghui Gu","orcid":"https://orcid.org/0000-0002-6812-6182"},"institutions":[{"id":"https://openalex.org/I78577930","display_name":"Columbia University","ror":"https://ror.org/00hj8s172","country_code":"US","type":"education","lineage":["https://openalex.org/I78577930"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ronghui Gu","raw_affiliation_strings":["Columbia University, New York, NY"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Columbia University, New York, NY","institution_ids":["https://openalex.org/I78577930"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5070627140","display_name":"Zhong Shao","orcid":"https://orcid.org/0000-0001-8184-7649"},"institutions":[{"id":"https://openalex.org/I32971472","display_name":"Yale University","ror":"https://ror.org/03v76x132","country_code":"US","type":"education","lineage":["https://openalex.org/I32971472"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Zhong Shao","raw_affiliation_strings":["Yale University, New Haven, CT"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Yale University, New Haven, CT","institution_ids":["https://openalex.org/I32971472"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5029615731","display_name":"Hao Chen","orcid":"https://orcid.org/0000-0001-6418-3043"},"institutions":[{"id":"https://openalex.org/I32971472","display_name":"Yale University","ror":"https://ror.org/03v76x132","country_code":"US","type":"education","lineage":["https://openalex.org/I32971472"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Hao Chen","raw_affiliation_strings":["Yale University, New Haven, CT"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Yale University, New Haven, CT","institution_ids":["https://openalex.org/I32971472"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5015256366","display_name":"Jieung Kim","orcid":"https://orcid.org/0000-0001-7581-041X"},"institutions":[{"id":"https://openalex.org/I32971472","display_name":"Yale University","ror":"https://ror.org/03v76x132","country_code":"US","type":"education","lineage":["https://openalex.org/I32971472"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jieung Kim","raw_affiliation_strings":["Yale University, New Haven, CT"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Yale University, New Haven, CT","institution_ids":["https://openalex.org/I32971472"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5084958510","display_name":"J\u00e9r\u00e9mie Koenig","orcid":"https://orcid.org/0000-0002-3168-5925"},"institutions":[{"id":"https://openalex.org/I32971472","display_name":"Yale University","ror":"https://ror.org/03v76x132","country_code":"US","type":"education","lineage":["https://openalex.org/I32971472"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"J\u00e9r\u00e9mie Koenig","raw_affiliation_strings":["Yale University, New Haven, CT"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Yale University, New Haven, CT","institution_ids":["https://openalex.org/I32971472"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5008718178","display_name":"Xiongnan Wu","orcid":null},"institutions":[{"id":"https://openalex.org/I32971472","display_name":"Yale University","ror":"https://ror.org/03v76x132","country_code":"US","type":"education","lineage":["https://openalex.org/I32971472"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Xiongnan (Newman) Wu","raw_affiliation_strings":["Yale University, New Haven, CT"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Yale University, New Haven, CT","institution_ids":["https://openalex.org/I32971472"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5076549227","display_name":"Vilhelm Sj\u00f6berg","orcid":"https://orcid.org/0009-0000-7371-4969"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Vilhelm Sj\u00f6berg","raw_affiliation_strings":["CertiK, Cambridge, MA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"CertiK, Cambridge, MA","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5046654886","display_name":"David Costanzo","orcid":null},"institutions":[{"id":"https://openalex.org/I32971472","display_name":"Yale University","ror":"https://ror.org/03v76x132","country_code":"US","type":"education","lineage":["https://openalex.org/I32971472"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"David Costanzo","raw_affiliation_strings":["Yale University, New Haven, CT"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Yale University, New Haven, CT","institution_ids":["https://openalex.org/I32971472"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":8,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":3.326,"has_fulltext":true,"cited_by_count":31,"citation_normalized_percentile":{"value":0.9395153,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":99},"biblio":{"volume":"62","issue":"10","first_page":"89","last_page":"99"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10772","display_name":"Distributed systems and fault tolerance","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10054","display_name":"Parallel Computing and Optimization Techniques","score":0.9975000023841858,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8614788055419922},{"id":"https://openalex.org/keywords/concurrency","display_name":"Concurrency","score":0.8384024500846863},{"id":"https://openalex.org/keywords/correctness","display_name":"Correctness","score":0.5579871535301208},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.5579817295074463},{"id":"https://openalex.org/keywords/x86","display_name":"x86","score":0.553757905960083},{"id":"https://openalex.org/keywords/parallel-computing","display_name":"Parallel computing","score":0.48353004455566406},{"id":"https://openalex.org/keywords/kernel","display_name":"Kernel (algebra)","score":0.46028345823287964},{"id":"https://openalex.org/keywords/soundness","display_name":"Soundness","score":0.45717814564704895},{"id":"https://openalex.org/keywords/mathematical-proof","display_name":"Mathematical proof","score":0.4431297183036804},{"id":"https://openalex.org/keywords/interleaving","display_name":"Interleaving","score":0.4211442172527313},{"id":"https://openalex.org/keywords/multi-core-processor","display_name":"Multi-core processor","score":0.4207915663719177},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.3524126708507538},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.3109148144721985},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.2882223129272461}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8614788055419922},{"id":"https://openalex.org/C193702766","wikidata":"https://www.wikidata.org/wiki/Q1414548","display_name":"Concurrency","level":2,"score":0.8384024500846863},{"id":"https://openalex.org/C55439883","wikidata":"https://www.wikidata.org/wiki/Q360812","display_name":"Correctness","level":2,"score":0.5579871535301208},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.5579817295074463},{"id":"https://openalex.org/C170723468","wikidata":"https://www.wikidata.org/wiki/Q182933","display_name":"x86","level":3,"score":0.553757905960083},{"id":"https://openalex.org/C173608175","wikidata":"https://www.wikidata.org/wiki/Q232661","display_name":"Parallel computing","level":1,"score":0.48353004455566406},{"id":"https://openalex.org/C74193536","wikidata":"https://www.wikidata.org/wiki/Q574844","display_name":"Kernel (algebra)","level":2,"score":0.46028345823287964},{"id":"https://openalex.org/C39920170","wikidata":"https://www.wikidata.org/wiki/Q693083","display_name":"Soundness","level":2,"score":0.45717814564704895},{"id":"https://openalex.org/C108710211","wikidata":"https://www.wikidata.org/wiki/Q11538","display_name":"Mathematical proof","level":2,"score":0.4431297183036804},{"id":"https://openalex.org/C28034677","wikidata":"https://www.wikidata.org/wiki/Q17092530","display_name":"Interleaving","level":2,"score":0.4211442172527313},{"id":"https://openalex.org/C78766204","wikidata":"https://www.wikidata.org/wiki/Q555032","display_name":"Multi-core processor","level":2,"score":0.4207915663719177},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.3524126708507538},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.3109148144721985},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.2882223129272461},{"id":"https://openalex.org/C2524010","wikidata":"https://www.wikidata.org/wiki/Q8087","display_name":"Geometry","level":1,"score":0.0},{"id":"https://openalex.org/C114614502","wikidata":"https://www.wikidata.org/wiki/Q76592","display_name":"Combinatorics","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3356903","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3356903","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3356903","source":{"id":"https://openalex.org/S103482838","display_name":"Communications of the ACM","issn_l":"0001-0782","issn":["0001-0782","1557-7317"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Communications of the ACM","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1145/3356903","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3356903","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3356903","source":{"id":"https://openalex.org/S103482838","display_name":"Communications of the ACM","issn_l":"0001-0782","issn":["0001-0782","1557-7317"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Communications of the ACM","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1534946070","display_name":null,"funder_award_id":"FA8750-16-2-0274","funder_id":"https://openalex.org/F4320332180","funder_display_name":"Defense Advanced Research Projects Agency"},{"id":"https://openalex.org/G1889560887","display_name":null,"funder_award_id":"12-2-0293","funder_id":"https://openalex.org/F4320332180","funder_display_name":"Defense Advanced Research Projects Agency"},{"id":"https://openalex.org/G1981839175","display_name":null,"funder_award_id":"1715154","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G3711486542","display_name":null,"funder_award_id":"FA8750-12-2-0293, FA8750-16-2- 0274, FA8750-15-C-0082","funder_id":"https://openalex.org/F4320332180","funder_display_name":"Defense Advanced Research Projects Agency"},{"id":"https://openalex.org/G4577670171","display_name":null,"funder_award_id":"FA8750-15-C-0082","funder_id":"https://openalex.org/F4320332180","funder_display_name":"Defense Advanced Research Projects Agency"},{"id":"https://openalex.org/G4713059963","display_name":null,"funder_award_id":"FA8750","funder_id":"https://openalex.org/F4320332180","funder_display_name":"Defense Advanced Research Projects Agency"},{"id":"https://openalex.org/G5302269093","display_name":null,"funder_award_id":"1065451, 1521523, 1715154","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G6080364906","display_name":null,"funder_award_id":"1521523","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G789317362","display_name":null,"funder_award_id":"FA8750-12-2-0293","funder_id":"https://openalex.org/F4320332180","funder_display_name":"Defense Advanced Research Projects Agency"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320308380","display_name":"Yale University","ror":"https://ror.org/03v76x132"},{"id":"https://openalex.org/F4320318547","display_name":"Baidu","ror":"https://ror.org/03vs3wt56"},{"id":"https://openalex.org/F4320320965","display_name":"University of New South Wales","ror":"https://ror.org/03r8z3t63"},{"id":"https://openalex.org/F4320332180","display_name":"Defense Advanced Research Projects Agency","ror":"https://ror.org/02caytj08"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2975647263.pdf","grobid_xml":"https://content.openalex.org/works/W2975647263.grobid-xml"},"referenced_works_count":17,"referenced_works":["https://openalex.org/W183305829","https://openalex.org/W971186954","https://openalex.org/W1545681762","https://openalex.org/W2001738739","https://openalex.org/W2022185456","https://openalex.org/W2023035194","https://openalex.org/W2073742357","https://openalex.org/W2084515464","https://openalex.org/W2095770127","https://openalex.org/W2136310957","https://openalex.org/W2203657859","https://openalex.org/W2236913981","https://openalex.org/W2250815476","https://openalex.org/W2412857152","https://openalex.org/W2415236938","https://openalex.org/W2768537380","https://openalex.org/W2798365728"],"related_works":["https://openalex.org/W1511249877","https://openalex.org/W2466303427","https://openalex.org/W4253571630","https://openalex.org/W2133697637","https://openalex.org/W2837991191","https://openalex.org/W1873898332","https://openalex.org/W2741423451","https://openalex.org/W1980322368","https://openalex.org/W2096357811","https://openalex.org/W2072005592"],"abstract_inverted_index":{"Operating":[0],"system":[1,8],"(OS)":[2],"kernels":[3],"form":[4],"the":[5,17,28,40,127,136,154,184,217],"backbone":[6],"of":[7,21,30,43,84,104,187,200,221],"software.":[9],"They":[10],"can":[11,99,115,122],"have":[12,26,38,100,172],"a":[13,54,70,101,142,175,222],"significant":[14],"impact":[15],"on":[16,53,93,207],"resilience":[18],"and":[19,50,91,111,119,182,202,205],"security":[20],"today's":[22],"computers.":[23],"Recent":[24],"efforts":[25],"demonstrated":[27],"feasibility":[29],"formally":[31,117],"verifying":[32],"simple":[33],"general-purpose":[34,223],"kernels,":[35],"but":[36,57],"they":[37],"ignored":[39],"important":[41],"issues":[42],"concurrency,":[44],"which":[45,151],"include":[46],"not":[47],"just":[48],"user":[49],"I/O":[51],"concurrency":[52],"single":[55],"core,":[56],"also":[58],"multi-core":[59],"parallelism":[60],"with":[61,165,227],"fine-grained":[62,228],"locking.":[63,229],"In":[64,107],"this":[65,215],"work,":[66],"we":[67,171],"present":[68],"CertiKOS,":[69,108,170],"novel":[71],"compositional":[72],"framework":[73],"for":[74,147],"building":[75],"verified":[76,125,137],"concurrent":[77,163,177,224],"OS":[78,178,225],"kernels.":[79],"Concurrency":[80],"allows":[81],"interleaved":[82],"execution":[83],"programs":[85],"belonging":[86],"to":[87],"different":[88,94,102],"abstraction":[89,128],"layers":[90,110],"running":[92],"CPUs/threads.":[95],"Each":[96],"such":[97,149],"layer":[98],"set":[103],"observable":[105,113],"events.":[106],"these":[109],"their":[112],"events":[114],"be":[116,124],"specified,":[118],"each":[120],"module":[121],"then":[123],"at":[126],"level":[129],"it":[130],"belongs":[131],"to.":[132],"To":[133,212],"link":[134],"all":[135],"pieces":[138],"together,":[139],"CertiKOS":[140],"enforces":[141],"so-called":[143],"contextual":[144],"refinement":[145],"property":[146],"every":[148],"piece,":[150],"states":[152],"that":[153],"implementation":[155],"will":[156],"behave":[157],"like":[158],"its":[159,188],"specification":[160],"under":[161],"any":[162,166],"context":[164],"valid":[167],"interleaving.":[168],"Using":[169],"successfully":[173],"developed":[174],"practical":[176],"kernel,":[179],"called":[180],"mC2,":[181],"built":[183],"formal":[185],"proofs":[186],"correctness":[189,219],"in":[190,197],"Coq.":[191],"The":[192],"mC2":[193],"kernel":[194,226],"is":[195,216],"written":[196],"6500":[198],"lines":[199],"C":[201],"x86":[203,209],"assembly":[204],"runs":[206],"stock":[208],"multicore":[210],"machines.":[211],"our":[213],"knowledge,":[214],"first":[218],"proof":[220]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":3},{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":10},{"year":2021,"cited_by_count":8},{"year":2020,"cited_by_count":5}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}