Hyperkernel: Push-Button Verification of an OS Kernel [pdf]syslab.cs.washington.edu4 pointsingve9 years ago