Comprehensive Formal Verification of an OS Microkernel [pdf]

courses.cs.washington.edu