Towards a practical, verified kernel (2007)

by Kevin Elphinstone, Gerwin Klein, Philip Derrin, Timothy Roscoe, Gernot Heiser
Venue:In Proc. 11th Workshop on Hot Topics in Operating Systems