{"id":"https://openalex.org/W7162453317","doi":"https://doi.org/10.48550/arxiv.2605.25411","title":"Heimdall: Formally Verified Automated Migration of Legacy eBPF Programs to Rust","display_name":"Heimdall: Formally Verified Automated Migration of Legacy eBPF Programs to Rust","publication_year":2026,"publication_date":"2026-05-25","ids":{"openalex":"https://openalex.org/W7162453317","doi":"https://doi.org/10.48550/arxiv.2605.25411"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.25411","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.25411","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.25411","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5065558612","display_name":"Vishnu Asutosh Dasu","orcid":"https://orcid.org/0000-0002-1849-1288"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Dasu, Vishnu Asutosh","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137019106","display_name":"Monika Santra","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Santra, Monika","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136993622","display_name":"Md Rafi Ur Rashid","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Rashid, Md Rafi Ur","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137013341","display_name":"Ashish Kumar -","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Kumar, Ashish","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5076300752","display_name":"Saeid Tizpaz-Niari","orcid":"https://orcid.org/0000-0002-1375-3154"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Tizpaz-Niari, Saeid","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5137062049","display_name":"Gang Tan","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Tan, Gang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9101999998092651,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9101999998092651,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10772","display_name":"Distributed systems and fault tolerance","score":0.014000000432133675,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.011900000274181366,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/memory-safety","display_name":"Memory safety","score":0.6341999769210815},{"id":"https://openalex.org/keywords/symbolic-execution","display_name":"Symbolic execution","score":0.5228000283241272},{"id":"https://openalex.org/keywords/soundness","display_name":"Soundness","score":0.4968999922275543},{"id":"https://openalex.org/keywords/schema","display_name":"Schema (genetic algorithms)","score":0.44999998807907104},{"id":"https://openalex.org/keywords/initialization","display_name":"Initialization","score":0.4404999911785126},{"id":"https://openalex.org/keywords/kernel","display_name":"Kernel (algebra)","score":0.3840000033378601},{"id":"https://openalex.org/keywords/enforcement","display_name":"Enforcement","score":0.3801000118255615},{"id":"https://openalex.org/keywords/linux-kernel","display_name":"Linux kernel","score":0.3783999979496002},{"id":"https://openalex.org/keywords/pipeline","display_name":"Pipeline (software)","score":0.3529999852180481},{"id":"https://openalex.org/keywords/legacy-system","display_name":"Legacy system","score":0.3528999984264374}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7838000059127808},{"id":"https://openalex.org/C28180684","wikidata":"https://www.wikidata.org/wiki/Q4080983","display_name":"Memory safety","level":3,"score":0.6341999769210815},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.6341000199317932},{"id":"https://openalex.org/C2779639559","wikidata":"https://www.wikidata.org/wiki/Q7661178","display_name":"Symbolic execution","level":3,"score":0.5228000283241272},{"id":"https://openalex.org/C39920170","wikidata":"https://www.wikidata.org/wiki/Q693083","display_name":"Soundness","level":2,"score":0.4968999922275543},{"id":"https://openalex.org/C52146309","wikidata":"https://www.wikidata.org/wiki/Q7431116","display_name":"Schema (genetic algorithms)","level":2,"score":0.44999998807907104},{"id":"https://openalex.org/C114466953","wikidata":"https://www.wikidata.org/wiki/Q6034165","display_name":"Initialization","level":2,"score":0.4404999911785126},{"id":"https://openalex.org/C74193536","wikidata":"https://www.wikidata.org/wiki/Q574844","display_name":"Kernel (algebra)","level":2,"score":0.3840000033378601},{"id":"https://openalex.org/C2779777834","wikidata":"https://www.wikidata.org/wiki/Q4202277","display_name":"Enforcement","level":2,"score":0.3801000118255615},{"id":"https://openalex.org/C553261973","wikidata":"https://www.wikidata.org/wiki/Q14579","display_name":"Linux kernel","level":2,"score":0.3783999979496002},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3614000082015991},{"id":"https://openalex.org/C43521106","wikidata":"https://www.wikidata.org/wiki/Q2165493","display_name":"Pipeline (software)","level":2,"score":0.3529999852180481},{"id":"https://openalex.org/C105446022","wikidata":"https://www.wikidata.org/wiki/Q445962","display_name":"Legacy system","level":3,"score":0.3528999984264374},{"id":"https://openalex.org/C77714075","wikidata":"https://www.wikidata.org/wiki/Q5452017","display_name":"Firewall (physics)","level":5,"score":0.3492000102996826},{"id":"https://openalex.org/C169590947","wikidata":"https://www.wikidata.org/wiki/Q47506","display_name":"Compiler","level":2,"score":0.34549999237060547},{"id":"https://openalex.org/C106131492","wikidata":"https://www.wikidata.org/wiki/Q3072260","display_name":"Filter (signal processing)","level":2,"score":0.3352999985218048},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.3246000111103058},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.32249999046325684},{"id":"https://openalex.org/C544833334","wikidata":"https://www.wikidata.org/wiki/Q2005","display_name":"JavaScript","level":2,"score":0.32199999690055847},{"id":"https://openalex.org/C2780069185","wikidata":"https://www.wikidata.org/wiki/Q7977945","display_name":"Equivalence (formal languages)","level":2,"score":0.319599986076355},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.31790000200271606},{"id":"https://openalex.org/C82484044","wikidata":"https://www.wikidata.org/wiki/Q334879","display_name":"Erlang (programming language)","level":3,"score":0.31139999628067017},{"id":"https://openalex.org/C2779662365","wikidata":"https://www.wikidata.org/wiki/Q5416694","display_name":"Event (particle physics)","level":2,"score":0.2989000082015991},{"id":"https://openalex.org/C160145156","wikidata":"https://www.wikidata.org/wiki/Q778586","display_name":"Executable","level":2,"score":0.29589998722076416},{"id":"https://openalex.org/C156731835","wikidata":"https://www.wikidata.org/wiki/Q751740","display_name":"Memory leak","level":4,"score":0.29010000824928284},{"id":"https://openalex.org/C43364308","wikidata":"https://www.wikidata.org/wiki/Q8799","display_name":"Byte","level":2,"score":0.27730000019073486},{"id":"https://openalex.org/C176982825","wikidata":"https://www.wikidata.org/wiki/Q835922","display_name":"Lexical analysis","level":2,"score":0.2711000144481659},{"id":"https://openalex.org/C115901376","wikidata":"https://www.wikidata.org/wiki/Q184199","display_name":"Automation","level":2,"score":0.2703999876976013},{"id":"https://openalex.org/C179518139","wikidata":"https://www.wikidata.org/wiki/Q5140297","display_name":"Coding (social sciences)","level":2,"score":0.26930001378059387},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.2687999904155731},{"id":"https://openalex.org/C162319229","wikidata":"https://www.wikidata.org/wiki/Q175263","display_name":"Data structure","level":2,"score":0.26570001244544983},{"id":"https://openalex.org/C105122174","wikidata":"https://www.wikidata.org/wiki/Q322202","display_name":"Garbage collection","level":3,"score":0.26170000433921814},{"id":"https://openalex.org/C149810388","wikidata":"https://www.wikidata.org/wiki/Q5374873","display_name":"Emulation","level":2,"score":0.25679999589920044},{"id":"https://openalex.org/C112505250","wikidata":"https://www.wikidata.org/wiki/Q787116","display_name":"Automaton","level":2,"score":0.25540000200271606},{"id":"https://openalex.org/C25016198","wikidata":"https://www.wikidata.org/wiki/Q781833","display_name":"Temporal logic","level":2,"score":0.2515000104904175}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.25411","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.25411","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.25411","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.25411","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/10","display_name":"Reduced inequalities","score":0.73527592420578}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Extended":[0],"Berkeley":[1],"Packet":[2],"Filter":[3],"(eBPF)":[4],"programs":[5,92,129,150,210],"are":[6],"kernel":[7,62],"extensions":[8],"used":[9],"for":[10],"networking,":[11],"observability,":[12],"and":[13,28,64,108,130,158,173,183],"security":[14],"enforcement":[15,78],"in":[16,88,165],"the":[17,61,116,178,200,216],"Linux":[18],"kernel.":[19],"The":[20],"in-kernel":[21],"eBPF":[22,31,91,189,209],"verifier":[23],"checks":[24],"low-level":[25],"memory":[26],"safety":[27,171],"termination":[29],"on":[30,119],"programs,":[32,190],"but":[33],"it":[34],"does":[35],"not":[36],"enforce":[37],"many":[38],"higher-level":[39],"source-level":[40,56],"properties,":[41],"such":[42,126],"as":[43],"initialization":[44],"discipline,":[45],"schema":[46],"consistency,":[47],"or":[48,75,95],"error":[49],"handling.":[50],"We":[51],"document":[52],"six":[53],"classes":[54],"of":[55,207],"bugs":[57],"that":[58,140,215],"compile,":[59],"pass":[60],"verifier,":[63],"can":[65],"silently":[66],"corrupt":[67],"data,":[68],"leak":[69],"previously":[70,84],"traced":[71,103],"events":[72],"to":[73,114,145,151,177,203],"userspace,":[74],"yield":[76],"incorrect":[77],"outcomes.":[79],"Among":[80],"these,":[81],"we":[82,134],"identify":[83],"unreported":[85],"information":[86],"leaks":[87],"ten":[89],"open-source":[90],"whose":[93],"ring-buffer":[94],"stack-resident":[96],"event":[97],"records":[98],"carry":[99],"fully":[100],"decodable":[101],"prior":[102],"events,":[104],"including":[105],"user-identifying":[106],"paths":[107],"recurring":[109],"kernel-text":[110],"return":[111],"addresses":[112],"sufficient":[113],"recover":[115],"KASLR":[117],"slide":[118],"every":[120],"event,":[121],"into":[122],"userspace.":[123],"To":[124],"harden":[125],"verifier-accepted":[127],"buggy":[128],"support":[131],"safe":[132],"migration,":[133],"present":[135],"Heimdall,":[136],"an":[137],"automated":[138],"pipeline":[139],"uses":[141],"large":[142],"language":[143],"models":[144],"translate":[146],"legacy":[147],"libbpf":[148],"C":[149],"Aya":[152],"Rust.":[153],"Heimdall":[154,191,198],"iteratively":[155],"repairs":[156],"compilation":[157],"kernel-verifier":[159],"failures,":[160],"rejects":[161],"unsafe":[162],"escape":[163],"hatches":[164],"Rust-Aya":[166],"with":[167,211],"a":[168],"static":[169],"analysis":[170],"engine,":[172],"proves":[174],"per-program":[175,212],"equivalence":[176,185],"original":[179],"via":[180],"symbolic":[181],"execution":[182],"Z3-based":[184],"checking.":[186],"Across":[187],"102":[188],"produces":[192],"96":[193],"formally":[194],"proven-equivalent":[195],"translations":[196],"(94.1%).":[197],"is":[199],"first":[201],"system":[202],"automate":[204],"memory-safe-language":[205],"migration":[206,217],"production":[208],"formal":[213],"guarantees":[214],"preserves":[218],"observable":[219],"behavior.":[220]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-05-27T00:00:00"}
