Towards a practical, verified kernel (2007)

by K Elphinstone, G Klein, P Derrin, T Roscoe, G Heiser
Venue:In Proc. HoTOS’07