Continuous Formal Verification of Amazon s2n

201851 citationsBook Chapterhybrid Open Access

Authors

Andrey Chudnov · Galois (United States)

Nathan Collins · Galois (United States)

Byron Cook · University College London

Joey Dodds · Galois (United States)

Brian Huffman · Galois (United States)

Colm MacCárthaigh · Amazon (United States)

S. Magill ·

Abstract

We describe formal verification of s2n, the open source TLS implementation used in numerous Amazon services. A key aspect of this proof infrastructure is continuous checking, to ensure that properties remain proven during the lifetime of the software. At each change to the code, proofs are automatically re-established with little to no interaction from the developers. We describe the proof itself and the technical decisions that enabled integration into development.

Topics & Keywords

Security and Verification in Computing Software Testing and Debugging Techniques Web Application Security Vulnerabilities

UN Sustainable Development Goals

Industry, innovation and infrastructure

Publication Details

Published in: Lecture notes in computer science

DOI: 10.1007/978-3-319-96142-2_26

Field-Weighted Citation Impact: 7.21