Towards an Ecosystem for Verifying Implementations of BFT protocols - - PowerPoint PPT Presentation

Towards an Ecosystem for Verifying Implementations of BFT protocols

Ivana Vukotic, Vincent Rahli, Marcus Völp and Paulo Esteves-Veríssimo

• Univ. of Luxembourg SnT

Luxembourg

<name>.<surname>@uni.lu http://wwwen.uni.lu/snt/research/critixv

April 23 2018

Ivana Vukotic An Ecosystem for Verifying Implementations of BFT protocols April 23 2018 Supported by the SnT and the National Research Fund Luxembourg (FNR), through PEARL grant FNR/P14/8149128

PhD start: April 2017 Areas: BFT & Formal verification

2

Summary

Ivana Vukotic April 23 2018 An Ecosystem for Verifying Implementations of BFT protocols

• Problem: Distributed systems are hard to implement

correct and maintain

• Why: Distributed systems are widely used and evolving
• Moto: ”Trust but verify” – U.S. President Ronald Reagan
• Consequence: Bring stronger guaranties about

correctness of existing systems, as well as help designers to build new robust systems

3

Critical information infrastructure

Ivana Vukotic An Ecosystem for Verifying Implementations of BFT protocols April 23 2018

4

BFT-SMR

Ivana Vukotic

There is NO lunch for free!

• Very complex
• No formal specification
• No implementation

April 23 2018 An Ecosystem for Verifying Implementations of BFT protocols

5

Our goal

Ivana Vukotic

• Ecosystem of formal tools for verifying implementations of

BFT protocols

• It will allow us to formally explore the breadth of

possibilities for designing such protocols

April 23 2018 An Ecosystem for Verifying Implementations of BFT protocols

6

Where do we fit?

Running code Byzantine (synch.) Byzantine (asynch.) EventML/IronFleet/Psync/Verdi/Disel HO-model/PVS ByMC/IOA/TLA+ Event-B

Velisarios

Ivana Vukotic April 23 2018 An Ecosystem for Verifying Implementations of BFT protocols

7

Velisarios

PBFT implementation Velisarios Coq Safety (agreement) OCaml Runtime envinronment Model of distributed knowledge Automation Model of Byzantine faults BFT model

Ivana Vukotic April 23 2018 An Ecosystem for Verifying Implementations of BFT protocols

8

Extraction and Evaluation

Ivana Vukotic

Figure 1. Single machine Figure 2. Several machines Figure 3. Single machine using MAC Figure 4. View change response time

April 23 2018 An Ecosystem for Verifying Implementations of BFT protocols

9

Lines of Research for my PhD

Ivana Vukotic

Hybrids:

• Components with different failure assumptions
• Interface between trusted-trustworthy

component and payload system

• Building abstractions
• Extend knowledge theory

State transfer and rejuvenation:

• More dynamic model
• Being faster about attacker speed
• Build abstractions
• Extend knowledge theory

April 23 2018 An Ecosystem for Verifying Implementations of BFT protocols

10

Future lines of research

Coq OCaml C Java Go

Bridging the gap Liveness/timeliness

April 23 2018 Ivana Vukotic An Ecosystem for Verifying Implementations of BFT protocols