{"id":"https://openalex.org/W4400484855","doi":"https://doi.org/10.1145/3663529.3663854","title":"How We Built Cedar: A Verification-Guided Approach","display_name":"How We Built Cedar: A Verification-Guided Approach","publication_year":2024,"publication_date":"2024-07-10","ids":{"openalex":"https://openalex.org/W4400484855","doi":"https://doi.org/10.1145/3663529.3663854"},"language":"en","primary_location":{"id":"doi:10.1145/3663529.3663854","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3663529.3663854","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Companion Proceedings of the 32nd ACM International Conference on the Foundations of Software Engineering","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1145/3663529.3663854","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5055403961","display_name":"Craig Disselkoen","orcid":"https://orcid.org/0000-0003-4358-2963"},"institutions":[{"id":"https://openalex.org/I1311688040","display_name":"Amazon (United States)","ror":"https://ror.org/04mv4n011","country_code":"US","type":"company","lineage":["https://openalex.org/I1311688040"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Craig Disselkoen","raw_affiliation_strings":["Amazon Web Services, Arlington, United States"],"raw_orcid":"https://orcid.org/0000-0003-4358-2963","affiliations":[{"raw_affiliation_string":"Amazon Web Services, Arlington, United States","institution_ids":["https://openalex.org/I1311688040"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5011732057","display_name":"Aaron Eline","orcid":"https://orcid.org/0000-0002-9105-4922"},"institutions":[{"id":"https://openalex.org/I1311688040","display_name":"Amazon (United States)","ror":"https://ror.org/04mv4n011","country_code":"US","type":"company","lineage":["https://openalex.org/I1311688040"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Aaron Eline","raw_affiliation_strings":["Amazon Web Services, Arlington, United States"],"raw_orcid":"https://orcid.org/0000-0002-9105-4922","affiliations":[{"raw_affiliation_string":"Amazon Web Services, Arlington, United States","institution_ids":["https://openalex.org/I1311688040"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103183170","display_name":"Shaobo He","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Shaobo He","raw_affiliation_strings":["Amazon Web Services, Santa Clara, United States"],"raw_orcid":"https://orcid.org/0000-0002-9899-6226","affiliations":[{"raw_affiliation_string":"Amazon Web Services, Santa Clara, United States","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5040567153","display_name":"Kyle Headley","orcid":"https://orcid.org/0000-0002-4880-4150"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Kyle Headley","raw_affiliation_strings":["Unaffiliated, Arlington, United States"],"raw_orcid":"https://orcid.org/0000-0002-4880-4150","affiliations":[{"raw_affiliation_string":"Unaffiliated, Arlington, United States","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5046625836","display_name":"Michael Hicks","orcid":"https://orcid.org/0000-0002-2759-9223"},"institutions":[{"id":"https://openalex.org/I1311688040","display_name":"Amazon (United States)","ror":"https://ror.org/04mv4n011","country_code":"US","type":"company","lineage":["https://openalex.org/I1311688040"]},{"id":"https://openalex.org/I2802210327","display_name":"United States University","ror":"https://ror.org/05r8r3608","country_code":"US","type":"education","lineage":["https://openalex.org/I2802210327"]},{"id":"https://openalex.org/I66946132","display_name":"University of Maryland, College Park","ror":"https://ror.org/047s2c258","country_code":"US","type":"education","lineage":["https://openalex.org/I66946132"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Michael Hicks","raw_affiliation_strings":["Amazon Web Services, Arlington, United States / University of Maryland, College Park, USA"],"raw_orcid":"https://orcid.org/0000-0002-2759-9223","affiliations":[{"raw_affiliation_string":"Amazon Web Services, Arlington, United States / University of Maryland, College Park, USA","institution_ids":["https://openalex.org/I1311688040","https://openalex.org/I2802210327","https://openalex.org/I66946132"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5002449883","display_name":"Kesha Hietala","orcid":"https://orcid.org/0000-0002-2724-0974"},"institutions":[{"id":"https://openalex.org/I1311688040","display_name":"Amazon (United States)","ror":"https://ror.org/04mv4n011","country_code":"US","type":"company","lineage":["https://openalex.org/I1311688040"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Kesha Hietala","raw_affiliation_strings":["Amazon Web Services, Arlington, United States"],"raw_orcid":"https://orcid.org/0000-0002-2724-0974","affiliations":[{"raw_affiliation_string":"Amazon Web Services, Arlington, United States","institution_ids":["https://openalex.org/I1311688040"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5019712655","display_name":"John Kastner","orcid":"https://orcid.org/0000-0002-1273-5990"},"institutions":[{"id":"https://openalex.org/I1311688040","display_name":"Amazon (United States)","ror":"https://ror.org/04mv4n011","country_code":"US","type":"company","lineage":["https://openalex.org/I1311688040"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"John Kastner","raw_affiliation_strings":["Amazon Web Services, Arlington, United States"],"raw_orcid":"https://orcid.org/0000-0002-1273-5990","affiliations":[{"raw_affiliation_string":"Amazon Web Services, Arlington, United States","institution_ids":["https://openalex.org/I1311688040"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Anwar Mamat","orcid":"https://orcid.org/0009-0007-1184-7206"},"institutions":[{"id":"https://openalex.org/I66946132","display_name":"University of Maryland, College Park","ror":"https://ror.org/047s2c258","country_code":"US","type":"education","lineage":["https://openalex.org/I66946132"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Anwar Mamat","raw_affiliation_strings":["University of Maryland, College Park, USA"],"raw_orcid":"https://orcid.org/0009-0007-1184-7206","affiliations":[{"raw_affiliation_string":"University of Maryland, College Park, USA","institution_ids":["https://openalex.org/I66946132"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5066642904","display_name":"Matt McCutchen","orcid":"https://orcid.org/0000-0003-4814-5148"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Matt McCutchen","raw_affiliation_strings":["Unaffiliated, Arlington, United States"],"raw_orcid":"https://orcid.org/0000-0003-4814-5148","affiliations":[{"raw_affiliation_string":"Unaffiliated, Arlington, United States","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5047763549","display_name":"Neha Rungta","orcid":"https://orcid.org/0000-0001-5143-8940"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Neha Rungta","raw_affiliation_strings":["Amazon Web Services, Santa Clara, United States"],"raw_orcid":"https://orcid.org/0000-0001-5143-8940","affiliations":[{"raw_affiliation_string":"Amazon Web Services, Santa Clara, United States","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5093320984","display_name":"Bhakti Shah","orcid":"https://orcid.org/0009-0000-2698-0260"},"institutions":[{"id":"https://openalex.org/I40347166","display_name":"University of Chicago","ror":"https://ror.org/024mw5h28","country_code":"US","type":"education","lineage":["https://openalex.org/I40347166"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Bhakti Shah","raw_affiliation_strings":["University of Chicago, Chicago, USA"],"raw_orcid":"https://orcid.org/0009-0000-2698-0260","affiliations":[{"raw_affiliation_string":"University of Chicago, Chicago, USA","institution_ids":["https://openalex.org/I40347166"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5088791029","display_name":"Emina Torlak","orcid":"https://orcid.org/0000-0002-1155-2711"},"institutions":[{"id":"https://openalex.org/I1311688040","display_name":"Amazon (United States)","ror":"https://ror.org/04mv4n011","country_code":"US","type":"company","lineage":["https://openalex.org/I1311688040"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Emina Torlak","raw_affiliation_strings":["Amazon Web Services, Seattle, United States"],"raw_orcid":"https://orcid.org/0000-0002-1155-2711","affiliations":[{"raw_affiliation_string":"Amazon Web Services, Seattle, United States","institution_ids":["https://openalex.org/I1311688040"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5062808161","display_name":"Andrew M. Wells","orcid":"https://orcid.org/0000-0001-7780-2122"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Andrew Wells","raw_affiliation_strings":["Amazon Web Services, Santa Clara, United States"],"raw_orcid":"https://orcid.org/0000-0001-7780-2122","affiliations":[{"raw_affiliation_string":"Amazon Web Services, Santa Clara, United States","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":13,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.6898,"has_fulltext":false,"cited_by_count":3,"citation_normalized_percentile":{"value":0.66579212,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":96},"biblio":{"volume":null,"issue":null,"first_page":"351","last_page":"357"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12482","display_name":"Tunneling and Rock Mechanics","score":0.9399999976158142,"subfield":{"id":"https://openalex.org/subfields/2205","display_name":"Civil and Structural Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12482","display_name":"Tunneling and Rock Mechanics","score":0.9399999976158142,"subfield":{"id":"https://openalex.org/subfields/2205","display_name":"Civil and Structural Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6459253430366516}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6459253430366516}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3663529.3663854","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3663529.3663854","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Companion Proceedings of the 32nd ACM International Conference on the Foundations of Software Engineering","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3663529.3663854","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3663529.3663854","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Companion Proceedings of the 32nd ACM International Conference on the Foundations of Software Engineering","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":21,"referenced_works":["https://openalex.org/W109452506","https://openalex.org/W2016423021","https://openalex.org/W2025018396","https://openalex.org/W2087834864","https://openalex.org/W2151704521","https://openalex.org/W2290177015","https://openalex.org/W2604664164","https://openalex.org/W2626841501","https://openalex.org/W2774510177","https://openalex.org/W2990912491","https://openalex.org/W3010700826","https://openalex.org/W3204018925","https://openalex.org/W4230108791","https://openalex.org/W4238083723","https://openalex.org/W4244488020","https://openalex.org/W4283019774","https://openalex.org/W4284706927","https://openalex.org/W4313355287","https://openalex.org/W4384163609","https://openalex.org/W4400484855","https://openalex.org/W6968929699"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052","https://openalex.org/W2382290278","https://openalex.org/W4395014643"],"abstract_inverted_index":{"This":[0],"paper":[1],"presents":[2],"verification-guided":[3],"development":[4],"(VGD),":[5],"a":[6,15,27],"software":[7],"engineering":[8],"process":[9],"we":[10,86,115],"used":[11],"to":[12,58,72],"build":[13,88],"Cedar,":[14,85],"new":[16],"policy":[17,123],"language":[18],"for":[19,49,84],"expressive,":[20],"fast,":[21,89],"safe,":[22],"and":[23,39,52,67,97,99,108,117,125,127,132],"analyzable":[24],"authorization.":[25],"Developing":[26],"system":[28,38,51],"with":[29],"VGD":[30,83],"involves":[31],"writing":[32,46],"an":[33],"executable":[34],"model":[35,95],"of":[36,75,78,140],"the":[37,44,50,61,65,79],"mechanically":[40],"proving":[41],"properties":[42,74],"about":[43],"model;":[45,66],"production":[47,62,80,91],"code":[48,63,106],"using":[53,68],"differential":[54],"random":[55],"testing":[56,70],"(DRT)":[57],"check":[59,73],"that":[60,104],"matches":[64],"property-based":[69],"(PBT)":[71],"unmodeled":[76],"parts":[77,139],"code.":[81],"Using":[82],"can":[87],"idiomatic":[90],"code,":[92],"prove":[93],"our":[94],"correct,":[96],"find":[98,131],"fix":[100,133],"subtle":[101],"implementation":[102],"bugs":[103,120,136],"evade":[105],"reviews":[107],"unit":[109],"testing.":[110],"While":[111],"carrying":[112],"out":[113],"proofs,":[114],"found":[116],"fixed":[118],"4":[119],"in":[121,137],"Cedar\u2019s":[122],"validator,":[124],"DRT":[126],"PBT":[128],"helped":[129],"us":[130],"21":[134],"additional":[135],"various":[138],"Cedar.":[141]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":1}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}