高级检索

    RISC-V SBI固件安全启动过程的形式化验证

    Formal Verification for Safe Startup Process of the RISC-V SBI Firmware

    • 摘要: RISC-V SBI(supervisor binary interface)标准定义了RISC-V架构硬件与操作系统的接口规范. 相比x86和arm固件,SBI固件更合规、可靠;但现有版本仍存在启动正确性未验证、PMP(physical memory protection)物理地址访问等安全漏洞. 为此,提出了定理证明驱动的闭环形式化验证框架,开发首个经形式验证的SBI固件——SeSBI.结合Dafny 与 Isabelle/HOL,以分层策略实现对启动过程的形式验证. 为提高验证效率,提出RISC-V硬件模拟策略,统一建模固件与硬件的交互,从而显著降低验证开销. 最终成功验证了SeSBI固件启动过程的功能正确性. 结果表明,SeSBI以更简洁的代码实现SBI标准启动过程接口,并具备高度可靠性,为RISC-V生态系统提供了首个经形式验证的可信SBI固件实现. 未来工作将扩展验证范围至更多高级属性,并优化验证工具以提升效率.

       

      Abstract: The RISC-V SBI (supervisor binary interface) specification establishes a standardized interface between RISC-V hardware architectures and operating systems. In comparison to traditional firmware implementations for x86 and ARM platforms, the RISC-V SBI firmware demonstrates superior compliance with architectural standards and offers enhanced reliability. However, the current SBI implementations still exhibit significant security concerns, particularly regarding unverified boot process correctness and vulnerabilities in PMP (physical memory protection) mechanisms for physical address access control. To this end, a closed-loop formal verification framework driven by theorem proving is proposed, developing the first formally verified SBI firmware—SeSBI. By integrating Dafny and Isabelle/HOL, a layered strategy is employed to formally verify specification properties across startup process. And to improve verification efficiency, a RISC-V hardware simulation strategy is introduced, unifying the modeling of firmware-hardware interactions, thereby significantly reducing verification overhead. Finally, the functional correctness of SeSBI in the boot process is successfully verified. The results demonstrate that SeSBI implements the SBI standard boot interface with more concise code and high reliability, providing the first formally verified, trusted SBI firmware implementation for the RISC-V ecosystem. Future work will expand verification coverage to more advanced properties and optimize tooling for greater efficiency.

       

    /

    返回文章
    返回