vTRUST: A formal modeling and verification framework for virtualization systems

• Main Authors: HAO, Jianan, LIU, Yang, CAI, Wentong, BAI, Guangdong, SUN, Jun
• Format: text
• Language: English
• Published: Institutional Knowledge at Singapore Management University 2013
• Subjects: Model Checker; Trust Platform Module; Malicious Code; Trust Computing; Virtualization System; Software Engineering
• Online Access: https://ink.library.smu.edu.sg/sis_research/5001; https://ink.library.smu.edu.sg/context/sis_research/article/6004/viewcontent/vtrust.pdf
• Institution: Singapore Management University

Virtualization is widely used for critical services like Cloud computing. It is desirable to formally verify virtualization systems. However, the complexity of the virtualization system makes the formal analysis a difficult task, e.g., sophisticated programs to manipulate low-level technologies, paged memory management, memory mapped I/O and trusted computing. In this paper, we propose a formal framework, vTRUST, to formally describe virtualization systems with a carefully designed abstraction. vTRUST includes a library to model configurable hardware components and technologies commonly used in virtualization. The system designer can thus verify virtualization systems on critical properties (e.g., confidentiality, verifiability, isolation and PCR consistency) with respect to certain adversary models. We demonstrate the effectiveness of vTRUST by automatically verifying a real-world Cloud implementation with critical bugs identified.