"Does Formal Verification Really Lead to Better Security?"

No ratings

Presented at BSidesCanberra 2019 by

Ihor Kuz

The hype is that formally verification and mathematical proof give you hack-proof systems. But of course that's not really true. So why is there increasingly more interest around formal verification and security? In this talk I'll look at what formal verification does give you and how this can be leveraged to improve security and safety of systems. I'll also talk about what it doesn't give you and what other measures are necessary for security. This will be based on work we've done on seL4 and related technologies and experience in building systems using these.