seL4: formal verification of an OS kernel (2009)

by G Klein, K Elphinstone, G Heiser, J Andronick, D Cock, P Derrin, D Elkaduwe, K Engelhardt, R Kolanski, M Norrish, T Sewell, H Tuch, S Winwood
Venue:In 22nd ACM symposium on Operating Systems Principles, SOSP 2009