Experience Report: seL4: Formally Verifying a High-Performance Microkernel
Gerwin Klein , Philip Derrin , Kevin Elphinstone; NICTA & UNSW, NICTA
International Conference on Functional Programming (ICFP) Edinburgh 2009 ACM SIGPLAN
Hmm…it looks like things are taking a while to load. Try again?