Creating High-Performance, Statically Type-Safe Network Applications

A typical Internet server finds itself in the middle of a virtual battleground, under constant threat from worms, viruses and other malware seeking to subvert the original intentions of the programmer. Critical Internet servers have had numerous security issues ranging from low-level buffer overflows to subtle logic errors. These problems have cost billions of dollars as the growth of the Internet exposes increasing numbers of computers to electronic malware. Despite the decades of research on techniques such as model-checking and type-safety, the vast majority of server implementations continue to be written unsafely and informally in C/C++. We describe an architecture for constructing new implementations of Internet protocols which integrates mature formal methods not currently used in deployed servers: 1) static type systems from the ML family of functional languages; 2) model checking to verify safety properties exhaustively about aspects of the servers; and 3) generative meta-programming to express high-level constraints for packet parsing and constructing non-deterministic state machines. Our code is written in OCaml, and freely available as open-source.

Autorentext

Dr. Anil Madhavapeddy is a Senior Research Fellow at Wolfson College Cambridge. He was on the team that developed the Xen hypervisor, and senior architect for XenSource/Citrix. Prior to obtaining his PhD, he had a diverse background at NetApp, NASA, and Internet Vision, and is a member of the OpenBSD team and other open-source projects.