The Specification-Based Testing of a Trusted Kernel: MK++.

Richard L. Ford, William R. Bevier, Richard T. Simon, Lawrence M. Smith

Browse the full ICFEM paper archive.