Formal Models of Operating System Kernels

The work that this book represents is something I have wanted to do since 1979. While in Ireland, probably in 2001, I sketched some parts of a small operating system speci?cation in Z but left it because of other duties. In 2002, I worked on the sketches again but was interrupted. Finally, in April, 2005, I decided to devote some time to it and produced what amounted to a ?rst version of the kernel to be found in Chapter 3 of this book. I even produced a few proofs, just to show that I was not on a completely insane tack. I decided to suggest the material as the subject of a book to Beverley Ford. The material was sent on a Thursday (I think). The following Monday, I received an email from her saying that it had gone out for review. The review process took less than 2 weeks; the response was as surprising as it was encouraging: a de?nite acceptance. So I got on with it. This book is intended as a new way to approach operating systems - sign in general, and kernel design in particular. It was partly driven by the old ambition mentioned above, by the need for greater clarity where it comes to kernels and by the need, as I see it, for a better foundation for operating systemsdesign.Securityaspects,too,playedapart―asnotedintheintrod- tory chapter, if a system’s kernel is insecure or unreliable, it will undermine attemptstoconstructsecuresoftwareontopofit.Securitydoesnototherwise play a part in this book.

The kernel of any operating system is its most critical component, the remainder of the system depends upon a correctly functioning and reliable kernel for its operation – what is more, a kernel that has security flaws can be exploited by malicious users. Kernels are notoriously complex and hard to understand.

The purpose of this book is to show that the formal specification of kernels is not only possible but also necessary if operating systems are to achieve the levels of reliability and security that is demanded of them today. Specifications of a sequence of kernels of increasing complexity are included, acting as models to enable the designer to identify and reason about the properties of the design – thus making explicit that which is too often left implicit or even unknown. A considerable amount of reasoning is included, showing what can be inferred about a design; and in addition, essential properties of data structures and mechanisms are discussed and the properties of these proved. Also included as an essential aspect of the activity, are the interfaces to the hardware and the processes running on them.

It is very easy to get bogged down in complexity issues when considering kernels, but this book’s prescriptive rather than descriptive approach shows how the kernel of an operating system can affect both the reliability and performance of these systems in a clear and concise style.

Iain is a fellow of the BSC and has a PhD in Computer Science.