2 citations found. Retrieving documents...
J. S. Shapiro, S. Weber, A Proof of Correctness for the EROS Confinement Mechanism CIS Technical Report ???, University of Pennsylvania (number to be assigned).

 Home/Search   Document Not in Database   Summary   Related Articles   Check  

This paper is cited in the following contexts:
Verifying Operating System Security - Shapiro, Weber (1997)   (3 citations)  Self-citation (Shapiro Weber)   (Correct)

.... Having described the architecture and mechanism, we describe and justify key parts of our modeling and proof methodology (Section 3) Section 4 presents the model itself, the formal statement of requirements, and the key pieces of the correctness proof (an unabridged proof may be found in [SW97a]) Finally, we discuss the implications of this work and its effect on the original system architecture and design. 2 The EROS Architecture EROS is a small, high performance operating system designed for security and reliability, and specifically to support efficient confinement [Sha96a] The ....

J. S. Shapiro, S. Weber, A Proof of Correctness for the EROS Confinement Mechanism CIS Technical Report ???, University of Pennsylvania (number to be assigned).


Verifying Operating System Security - Shapiro, Weber (1997)   (3 citations)  Self-citation (Shapiro Weber)   (Correct)

.... Having described the architecture and mechanism, we describe and justify key parts of our modeling and proof methodology (Section 3) Section 4 presents the model itself, the formal statement of requirements, and the key pieces of the correctness proof (an unabridged proof may be found in [SW97a]) Finally, we discuss the implications of this work and its effect on the original system architecture and design. 2 The EROS Architecture EROS is a small, high performance operating system designed for security and reliability, and specifically to support efficient confinement [Sha96a] The ....

J. S. Shapiro, S. Weber, A Proof of Correctness for the EROS Confinement Mechanism CIS Technical Report ???, University of Pennsylvania (number to be assigned). A Operational Semantics All components of S 0 are assumed to be the same as in S unless stated otherwise.

Online articles have much greater impact   More about CiteSeer.IST   Add search form to your site   Submit documents   Feedback  

CiteSeer.IST - Copyright Penn State and NEC