Modeling and Verification (1995)

by G Duval, J Julliand
Venue:of the RUBIS Micro-Kernel with SPIN,” Proc. First SPIN Workshop