The Specification-Based Testing of a Trusted Kernel: MK (1997)

by Richard L Ford, Richard T Simon, William R Bevier, Lawrence M Smith
Venue:ICFEM97, the 1997 International Conference on Formal Engineering Methods