seL4: formal verification of an OS kernel (0)

by G Klein, K Elphinstone, G Heiser, J Andronick, D Cock, P Derrin, D Elkaduwe, K Engelhardt, R Kolanski, M Norrish, T Sewell, H Tuch, S Winwood
Venue:In Proc. 22nd ACM SOSP