Verified Translation Validation of Static Analyses - Inria - Institut national de recherche en sciences et technologies du numérique
Communication Dans Un Congrès Année : 2017

Verified Translation Validation of Static Analyses

Gilles Barthe
  • Fonction : Auteur
  • PersonId : 962305
Vincent Laporte
Alix Trieu

Résumé

Motivated by applications to security and high efficiency , we propose an automated methodology for validating on low-level intermediate representations the results of a source-level static analysis. Our methodology relies on two main ingredients: a relative-safety checker, an instance of a relational verifier which proves that a program is "safer" than another, and a transformation of programs into defensive form which verifies the analysis results at runtime. We prove the soundness of the methodology, and provide a formally verified instantiation based on the Verasco verified C static analyzer and the CompCert verified C compiler. We experiment with the effectiveness of our approach with client optimizations at RTL level, and static analyses for cache-based timing side-channels and memory usage at pre-assembly levels.
Fichier principal
Vignette du fichier
csf17.pdf (833.29 Ko) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-01588422 , version 1 (15-09-2017)

Identifiants

  • HAL Id : hal-01588422 , version 1

Citer

Gilles Barthe, Sandrine Blazy, Vincent Laporte, David Pichardie, Alix Trieu. Verified Translation Validation of Static Analyses. Computer Security Foundations Symposium, Aug 2017, Santa-Barbara, United States. ⟨hal-01588422⟩
468 Consultations
497 Téléchargements

Partager

More