General Information
Runtime Verification Is A Method Of Computational System Analysis And Execution Designed To Extract Information From A Running System To Detect And Possibly Respond To Whether Observed Behavior Meets Or Violates Certain Attributes. This Technique Can Be Used For A Variety Of Purposes, Such As Security Or Security Policy Monitoring, Debugging, Testing, Verification, Validation, Performance Analysis, Failsafe, Behavior Modification, And More. It Avoids The Complexities Of Traditional Formal Verification Techniques By Analyzing A Small Number Of Execution Trajectories And Working Directly With The Actual System.
Runtime Verification Inc. Is A Company Focused On Virtual Machine And Smart Contract Security Audits Using Runtime Verification Techniques. The Services They Provide Include Design Reviews, Code Reviews, Audits, And Formal Verification Of Smart Contracts And Protocols.
What Products Are Currently Offered By Runtime Verification Inc.?
Runtime Verification Inc. Is Currently Developing Three Core Products: RV-Predict Is A Predictive Runtime Analysis Tool That Focuses On Automatically Detecting Concurrent Errors In A Program. RV-Monitor Is A Development Methodology And Library Generation Tool That Allows User-selected Properties To Be Monitored And Executed At Runtime. RV-Match Is A Tool That Allows Exhaustive Runtime Validation To Be Performed Symbolically On All Possible Program Paths, Thereby Proving That Certain Properties Are Correct For All Possible Executions Of A Given Program.
When And Why Should RV-Predict Be Used?
Whenever Concurrency Correctness Is Important For Multi-threaded Applications, RV-Predict Should Be Used. RV-Predict Is Able To Efficiently And Seamlessly Detect Concurrency Issues And Data Contention In A Program, Is Very Easy To Run, And Generally Does Not Require Any Configuration. RV-Predict Also Utilizes Unique Prediction Capabilities To Detect Possible Contentions, Even If They Do Not Occur In The Execution Trace Of RV-Predict Records.
When And Why Should RV-Monitor Be Used?
RV-Monitor Allows To Monitor Complex Applications Or Systems And Perform Trace Execution Properties On Them. RV-Monitor Should Be Used As Long As A Specification Exists For Managing Program Development, And Adherence To This Specification Is A Critical Feature Of The Software. RV-Monitor Can Also Be Used To Monitor Compliance With Common APIs, Including Android And Java APIs.
When And Why Should RV-Match Be Used?
RV-Monitor Can Verify And Enforce Compliance With Certain Properties Of A Given Program's Execution, While RV-Match Can Prove The Correctness Of A Program At Runtime, Thus Analyzing Execution Traces On All Possible Execution Paths And All Possible Inputs. RV-Match Provides Strong Correctness Guarantees, Simulating Execution In A Symbolic Manner Using The Formally Defined Semantics Of The Target Language. When Strong Guarantees Of Formal Validation Are Required, RV-Match Should Be Used, And Can Also Be Used With RV-Monitor To Eliminate Monitoring Of Areas That Can Prove That Properties Have Never Been Violated.
Which Licenses Are Covered By Runtime Verification Inc.'s Products?
Projects Developed By RV Fall Into Two Categories: Proprietary Products And Those Licensed Under An Open License (as Part Of RV's Open Source Ecosystem).
Proprietary Products Include All Products Not Expressly Licensed Under An Open License And Are Used Only For Evaluation And Academic/non-commercial Purposes. Derivative Works May Not Be Created Using Proprietary RV Products Without Prior Permission, And RV Reserves All Rights To Proprietary Products. Proprietary Products May Not Be Reverse-engineered In Any Way.
Blockchain Project Audit
Runtime Verification Has Been Involved In Auditing Multiple Blockchain Projects, Including But Not Limited To The Following:
- Security Audit Of Smart Contracts: They Provide Low-cost Audits Of Contracts Such As ERC-20, ERC-721, ERC-4626, Etc.
- Security Audit Of Protocols: Includes Protocols For Lending-related Operations.
- Formal Verification: Provides Open-source Formal Verification And Developer Tools To Reduce Audit Costs And Enable Continuous Formal Verification.
Their Audits Typically Include Manual Reviews And Formal Verifications To Ensure High Levels Of Code Security And Reliability.
