Has anyone attempted attacking SeL4 seriously? What were the results?
Having some experience with formal verification, I have a deep mistrust of the proofs.
It is so easy to mistake a proof of the property you want with the proof of a property you've written, or even with a minor misstatement of the environment
Having some experience with formal verification, I have a deep mistrust of the proofs.
It is so easy to mistake a proof of the property you want with the proof of a property you've written, or even with a minor misstatement of the environment