Applying source-code verification to a microkernel: the vfiasco project (2002)

by M Hohmuth, H Tews, S Stephens
Venue:In Proc. 10th ACM SIGOPS