No crash, no exploit: Automated verification of embedded Kernels

Olivier Nicole (1, 2, 3) , Matthieu Lemerre (4) , Sébastien Bardin (4) , Xavier Rival (1, 2, 3)

1 ANTIQUE - Analyse Statique par Interprétation Abstraite
2 DI-ENS - Département d'informatique - ENS Paris
3 PSL - Université Paris sciences et lettres
4 LIST (CEA) - Laboratoire d'Intégration des Systèmes et des Technologies

The kernel is the most safety-and security-critical component of many computer systems, as the most severe bugs lead to complete system crash or exploit. It is thus desirable to guarantee that a kernel is free from these bugs using formal methods, but the high cost and expertise required to do so are deterrent to wide applicability. We propose a method that can verify both absence of runtime errors (i.e. crashes) and absence of privilege escalation (i.e. exploits) in embedded kernels from their binary executables. The method can verify the kernel runtime independently from the application, at the expense of only a few lines of simple annotations. When given a specific application, the method can verify simple kernels without any human intervention. We demonstrate our method on two different use cases: we use our tool to help the development of a new embedded real-time kernel, and we verify an existing industrial real-time kernel executable with no modification. Results show that the method is fast, simple to use, and can prevent real errors and security vulnerabilities.

Domaines: Langage de programmation [cs.PL]

Olivier Nicole, Matthieu Lemerre, Sébastien Bardin, Xavier Rival. No crash, no exploit: Automated verification of embedded Kernels. RTAAS 2021 - Real-Time and Embedded Technology and Applications Symposium, May 2021, Nashville, United States. ⟨hal-03538067⟩