2 ms·Toward Compositional Verification of Interruptible OS Kernels and Device Drivers [pdf]1 points by lainon 8y ago