Modular Verification of Programs with Effects and Effect Handlers in Coq

Thomas Letan (1, 2) , Yann Régis-Gianas (3, 4) , Pierre Chifflier (1) , Guillaume Hiet (2)

1 ANSSI - Agence nationale de la sécurité des systèmes d'information
2 CIDRE - Confidentialité, Intégrité, Disponibilité et Répartition
3 LRDE - Laboratoire de Recherche et de Développement de l'EPITA
4 PI.R2 - Design, study and implementation of languages for proofs and programs

Modern computing systems have grown in complexity, and the attack surface has increased accordingly. Even though system components are generally carefully designed and even verified by different groups of people, the composition of these components is often regarded with less attention. This paves the way for " architectural attacks " , a class of security vulnerabilities where the attacker is able to threaten the security of the system even if each of its components continues to act as expected. In this article, we introduce FreeSpec, a formalism built upon the key idea that components can be modelled as programs with algebraic effects to be realized by other components. FreeSpec allows for the modular modelling of a complex system, by defining idealized components connected together, and the modular verification of the properties of their composition. In addition, we have implemented a framework for the Coq proof assistant based on FreeSpec.

Domaines: Informatique [cs]; Logique en informatique [cs.LO]

Thomas Letan, Yann Régis-Gianas, Pierre Chifflier, Guillaume Hiet. Modular Verification of Programs with Effects and Effect Handlers in Coq. FM 2018 - 22nd International Symposium on Formal Methods, Jul 2018, Oxford, United Kingdom. pp.338-354, ⟨10.1007/978-3-319-95582-7_20⟩. ⟨hal-01799712⟩