SpecMon: Unifying Verification and Monitoring for WireGuard (RVCase '25 Artifact)

This artifact contains a complete reproducible implementation of the WireGuard case study for SpecMon, demonstrating the creation and use of a unified model for both formal verification and runtime monitoring. This work addresses the critical problem of specification divergence between verification and monitoring models.

The artifact includes Docker images and files for the WireGuard case study, providing instructions to reproduce the unified modeling and runtime monitoring evaluation. The key contribution is a single Tamarin model of WireGuard that serves both for formal verification and runtime monitoring with SpecMon, ensuring that the specification proven correct is the same one used for monitoring.

Expected Evaluation Time: 30 seconds to 3 minutes depending on client count
Expected Verification Time: ~100 seconds for all security properties
System Requirements: Docker, 8GB+ RAM (recommended: 16GB for large client counts), multi-core CPU