计算机与现代化

• 信息安全 • 上一篇    下一篇

基于Isabelle/HOL的安全操作系统形式化验证方法

  

  1. 南京南瑞信息通信科技有限公司,江苏南京210003
  • 收稿日期:2016-08-19 出版日期:2017-04-20 发布日期:2017-05-08
  • 作者简介:郭毅(1988-),男,山东德州人,南京南瑞信息通信科技有限公司工程师,硕士,研究方向:操作系统安全; 杨维永(1978-),〖JP2〗男,江苏宿迁人,高级工程师,研究方向:信息安全; 刘苇(1986-),男,江西赣州人,工程师,硕士,研究方向:信息安全。
  • 基金资助:
    国家自然科学基金资助项目(61321491); 江苏省工业和信息产业转型升级专项项目(2015SJXKJ5038); 国网电力科学研究院科技项目(5246DR150002)

Formal Verification Method of Secure Operating System Based on Isabelle/HOL

  1. NARI Information & Communication Technology Co. Ltd., Nanjing 210003, China
  • Received:2016-08-19 Online:2017-04-20 Published:2017-05-08

摘要: 操作系统作为信息时代的基石,其安全性不言而喻。常规的软件测试方法不足以保障操作系统的安全性,需使用更为严格的基于数理逻辑的形式化验证方法。本文提出一种软件形式化验证的新思路:通过在Isabelle中构造模拟运行环境,使汇编代码运行其中,并记录系统状态的变化,最终根据程序运行前后系统状态的变化情况判断程序的正确性和安全性。重点介绍了顺序、分支和循环等3种程序结构的证明方法,并通过一个程序实例证明,得到在任意前提条件下程序执行前后系统状态的变化情况。

关键词: 安全操作系统, 形式化验证, Isabelle/HOL, 霍尔逻辑

Abstract: As the cornerstone of the information age, the importance of operating system security is self-evident. Conventional methods of software testing are not enough to guarantee the safety of the operating system, so we need to use more rigorous formal verification methods based on mathematical logic. This paper puts forward a new idea of formal verification of software: constructing a simulation running environment in Isabelle, and running the assembly code in it, recording the changes of the system state, and finally according to the changes of system state before and after run of the program, determining the correctness and safety of the program. It emphatically introduces the prove method of sequential, conditional and iterative structure, uses them on to a sample program, and gets the state  changes under any preconditions.

Key words: secure operating system, formal verification, Isabelle/HOL, Hoare logic

中图分类号: