Formal Methods for MILS: Formalisations of the GWV Firewall

Conference object OPEN
Koolen, Ruud ; Schmaltz, Julien (2015)
  • Related identifiers: doi: 10.5281/zenodo.47983
  • Subject: MILS
    acm: TheoryofComputation_MATHEMATICALLOGICANDFORMALLANGUAGES | TheoryofComputation_LOGICSANDMEANINGSOFPROGRAMS

To achieve security certification according to the highest levels of assurance, formal models and proofs of security properties are required. In the MILS context, this includes formalisation of key components - such as separation kernels - and the formalisation of applications built on top of these verified components. In this paper, we use the Isabelle/HOL proof assistant to formalise the Firewall application built on top of a verified separation kernel according to the model of Greve, Wilding, and Vanfleet (GWV). This Firewall application has been formalised twice after the original effort by GWV. These different efforts have been compared and discussed on paper. Our main contribution is to provide a formal comparison between these formalisations in the formal logic of a proof assistant.
Share - Bookmark

  • Download from
    ZENODO via ZENODO (Conference object, 2015)
  • Cite this publication