2013/10/08 by Kevin Elphinstone, Gernot Heiser · 2 citations
Computer Science · #Advanced Malware Detection Techniques #Computer science #Distributed systems and fault tolerance #Formal methods #Kernel (algebra) #Microkernel #Model checking #Operating system #Programming language #Security and Verification in Computing #Software engineering
paper · pdf · doi:10.1145/2517349.2522720
openalex publication_date 2013/10/08 · openalex created_date 2025/10/10 · openalex updated_date 2026/07/29
The L4 microkernel has undergone 20 years of use and evolution. It has an active user and developer community, and there are commercial versions which are deployed on a large scale and in safety-critical systems. In this paper we examine the lessons learnt in those 20 years about microkernel design and implementation. We revisit the L4 design papers, and examine the evolution of design and implementation from the original L4 to the latest generation of L4 kernels, especially seL4, which has pushed the L4 model furthest and was the first OS kernel to undergo a complete formal verification of its implementation as well as a sound analysis of worst-case execution times. We demonstrate that while much has changed, the fundamental principles of minimality and high IPC performance remain the main drivers of design and implementation decisions.