Linked by Thom Holwerda on Wed 22nd Jan 2014 13:47 UTC, submitted by fran
OSNews, Generic OSes

The Muen Separation Kernel is the world's first Open Source microkernel that has been formally proven to contain no runtime errors at the source code level. It is developed in Switzerland by the Institute for Internet Technologies and Applications (ITA) at the University of Applied Sciences Rapperswil (HSR). Muen was designed specifically to meet the challenging requirements of high-assurance systems on the Intel x86/64 platform. To ensure Muen is suitable for highly critical systems and advanced national security platforms, HSR closely cooperates with the high-security specialist secunet Security Networks AG in Germany.

The webpage contains instructions for building the kernel yourself, for installing it in a virtual machine, and for running it on real hardware.

Permalink for comment 581421
To read all comments associated with this story, please click here.
RE[2]: The SWISS
by pgeorgi on Thu 23rd Jan 2014 06:42 UTC in reply to "RE: The SWISS"
pgeorgi
Member since:
2010-02-18

What you may be looking for is the halting problem.

SPARK 2014 (which Muen doesn't use yet) attempts to attack the halting problem with loop variants. By proving that all loops terminate at some point, you can show that all blocks of code terminates eventually.
In case of an operating system kernel, you will still have an endless outer loop, since you don't want the entire system to terminate after a well-defined number of steps.

And it's not even the first language that eliminates the halting problem. For example, DTrace's script language is also safe since it only allows loops with predefined iteration boundaries and forward jumps.

Neither language is turing complete (in case of SPARK 2014: if you choose to use loop variants), but many solutions to problems don't need this kind of power, so you can still write meaningful code within this constraint.

Reply Parent Score: 3