Kemmerer 82] Richard A. Kemmerer. Formal Verification of an Operating System Security Kernel (1983)

by UMI Research Press, Ann Arbor, Michigan