Conference paper Open Access
Automated Synthesis of Verified Firewalls
Shardul Chiplunkar;
Clément Pit-Claudel;
Adam Chlipala
We demonstrate correct-by-construction firewalls—stateful packet filters for TCP/IP packets—using the Fiat synthesis library [3]. We present a general DSL for specifying their behavior independent of algorithmic implementation. We outline the design of a verified compiler in Coq, detail a few verified efficiency optimizations, and show how the compiler can easily be extended to support custom optimizations for user-defined policies.
Files
(352.8 kB)
| Name | Size | |
|---|---|---|
|
verified-firewalls.pdf
md5:d9a93578bde73e69df22a273eb33b5be |
352.8 kB | Download |
58
44
views
downloads
| All versions | This version | |
|---|---|---|
| Views | 58 | 58 |
| Downloads | 44 | 44 |
| Data volume | 15.5 MB | 15.5 MB |
| Unique views | 53 | 53 |
| Unique downloads | 41 | 41 |
Indexed in
- Publication date:
- January 19, 2021
- DOI:
-
- Keyword(s):
- formal verification programming languages firewall
- Meeting:
- The Seventh International Workshop on Coq for Programming Languages (CoqPL), 19 January 2021
- Related identifiers:
- Identical to
- License (for files):
- Creative Commons Attribution 4.0 International