G.: Verifying the L4 virtual memory subsystem (2004)

by H Tuch, Klein
Venue:In: Proc. NICTA Formal Methods Workshop on Operating Systems Verification