Reflections on the Verification of the Security of an Operating System Kernel.

Jonathan M. Silverman

Browse the full SOSP paper archive.