Read more
This book was written as a companion to my book on modelling operating system kernels. It is intended to demonstrate that the formal derivation of kernels is possible (and, actually, quite easy, or so I have found thus far). Itisimportantforthereadertounderstandthatthere?nementscontained in this book are not the only ones I have performed of microkernels. To date, I have re?ned four microkernels down to executable code and have now p- duced a kit of formally speci?ed components that can be composed to form kernels. The ?rst kernel included in this book is just one example of this work. The second kernel, the Separation Kernel, is new and was partly constructed out of the kit of parts (and the reader will see reuse in its speci?cation and re?nement) and was included for speci?c reasons that will become clear anon. Bothkernelstooklessthanthreemonths'workingtimetoproduce(theactual time is rather hard to calculate because of frequent interruptions). Previous experience in re?ning kernels also paid o? in the sense that there was l- tle revision involved in their speci?cation or re?nement; the usual process of yo-yoing between levels of the derivation was absent. This appears to be an inevitable consequence of experience.
List of contents
Introduction.- Reasons for Selecting the Examples.- Refinement Method.- Code Production.- Organisation of this Book.- Relationship to Other Work.- The Simple Kernel's Organisation.- A Simple Kernel.- Types.- Hardware.- The Process Table.-Process Queue.- Priority Queue.- The Scheduler.- Semaphores.- Semaphore Table.- Synchronous Messages.- The Clock.- Sleepers.-User Interface.- The Separation Kernel.-Basic Architecture.- Extending the Architecture.- Summary.- An Overview of the Formal Specification.- A Separation Kernel.- Basic Types.- Hardware Issues.- Security Exits and Return Values.- The Process Table.- Process Queues.- The Scheduler.- Storage Pools.- Raw Storage.- Message Queues.- Kernel Interface-User Processes.- Devices-Trusted Code.- Process Interface to the Kernel.- Final Thoughts.- Closing Thoughts.- References.- List of Definitions.
Summary
This book was written as a companion to my book on modelling operating system kernels. It is intended to demonstrate that the formal derivation of kernels is possible (and, actually, quite easy, or so I have found thus far). Itisimportantforthereadertounderstandthatthere?nementscontained in this book are not the only ones I have performed of microkernels. To date, I have re?ned four microkernels down to executable code and have now p- duced a kit of formally speci?ed components that can be composed to form kernels. The ?rst kernel included in this book is just one example of this work. The second kernel, the Separation Kernel, is new and was partly constructed out of the kit of parts (and the reader will see reuse in its speci?cation and re?nement) and was included for speci?c reasons that will become clear anon. Bothkernelstooklessthanthreemonths’workingtimetoproduce(theactual time is rather hard to calculate because of frequent interruptions). Previous experience in re?ning kernels also paid o? in the sense that there was l- tle revision involved in their speci?cation or re?nement; the usual process of yo-yoing between levels of the derivation was absent. This appears to be an inevitable consequence of experience.
