Modeling and Verification of the RUBIS Micro-Kernel with SPIN (1995)

by G Duval, J Julliand
Venue:Proc. First SPIN Workshop