Overview
Coursera Flash Sale
40% Off Coursera Plus for 3 Months!
Grab it
Watch this 14-minute conference presentation from OOPSLA 2025 that introduces a novel type-based verification approach for Extended Berkeley Packet Filter (eBPF) programs. Learn how researchers from Florida State University, University of Waterloo, and Certora developed VeRefine, a flow-sensitive refinement type system that addresses critical security challenges in kernel-level programming. Discover how this innovative approach automatically infers proof certificates in userspace, significantly reducing the size and complexity of trusted codebases compared to existing monolithic eBPF verification methods. Explore the technical details of how the system enhances program debuggability through ergonomic type annotations when verification fails, and examine performance comparisons showing VeRefine outperforming the existing Prevail verifier on industrial benchmarks. Gain insights into advanced concepts including flow-sensitivity, refinement types, type inference, memory safety, information flow safety, and automated reasoning about low-level code, all presented by the research team that developed this groundbreaking verification tool for securing operating system kernel extensions.
Syllabus
[OOPSLA'25] A Flow-Sensitive Refinement Type System for Verifying eBPF Programs
Taught by
ACM SIGPLAN