SeL4

Common card · No. 269888

seL4 (security enhanced L4) is an open-source, high-assurance, capability-based microkernel. It inherits the performance and design characteristics of the L4 microkernel lineage but is implemented using high-assurance methods. seL4 uses formal mathematical verification to prove the system's confidentiality, integrity, availability among other properties. The initial paper outlining seL4's verification was inducted into the 2019 ACM SIGOPS Hall of Fame. The kernel is extremely minimal, handling only memory management, process isolation, and scheduling. Its Inter-Process Communication (IPC) acts as a protected procedure call for cross-domain invocation rather than general-purpose message passing.

Read on Wikipedia