CertiFlash: A Formal Verification Framework for Flash Translation Layers in Computational Solid State Drives
CertiFlash provides machine-checked formal verification of SSD flash translation layers, proving isolation, integrity, and ownership invariants to prevent tenant data leaks.
CertiFlash is an open-source formal verification framework for Flash Translation Layers (FTL) in computational SSDs, mechanized in the Rocq proof assistant. It shows that a faulty FTL can corrupt device state at five surfaces (e.g., leaking data between tenants or dropping integrity tags), demonstrated on a DaisyPlus OpenSSD. Designers prove once that every operation of a general FTL model preserves a global invariant covering mapping, isolation, integrity, ownership, and allocation; new designs need only discharge five hypotheses. Across four case studies, added effort was 27-3,231 lines against a 16,489-line framework.
- Faulty FTL can cross tenant data boundaries even when functionally correct
- Single machine-checked proof covers security plus functional correctness
- New FTL designs verify by discharging five hypotheses, not redoing proofs
- Validated across four case studies on OpenSSD hardware
- Products
- CertiFlashDaisyPlus OpenSSD
From the original article
1 min read at arxiv.orgData-intensive applications move large amounts of data from storage to the compute unit, incurring significant data movement overhead. Storage-centric computing reduces this overhead by moving computation near or inside solid-state drives (SSDs). Enabling it requires modifying SSD policies, e.
By Harshita Gupta · arxiv.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.