@inproceedings{cs-05-1,
  title = {{seL4: formal verification of an OS kernel}},
  author = {Klein, Gerwin and Elphinstone, Kevin and Heiser, Gernot and Andronick, June and Cock, David and Derrin, Philip and Elkaduwe, Dhammika and Engelhardt, Kai and Kolanski, Rafal and Norrish, Michael and Sewell, Thomas and Tuch, Harvey and Winwood, Simon},
  booktitle = {Proceedings of the ACM SIGOPS 22nd symposium on Operating systems principles},
  year = {2009},
  doi = {10.1145/1629575.1629596},
  url = {https://sel4.org/Research/pdfs/sel4-formal-verification-os-kernel.pdf}
}

@inproceedings{cs-05-2,
  title = {{CertiKOS: An Extensible Architecture for Building Certified Concurrent OS Kernels}},
  author = {Gu, Ronghui and Shao, Zhong and Chen, Hao and Wu, Xiongnan and Kim, Jieung and Sjoberg, Vilhelm and Costanzo, David},
  booktitle = {USENIX OSDI},
  year = {2016},
  url = {https://www.usenix.org/conference/osdi16/technical-sessions/presentation/gu}
}

@inproceedings{cs-05-3,
  title = {{IronFleet: proving practical distributed systems correct}},
  author = {Hawblitzel, Chris and Howell, Jon and Kapritsos, Manos and Lorch, Jacob R. and Parno, Bryan and Roberts, Michael L. and Setty, Srinath and Zill, Brian},
  booktitle = {Proceedings of the 25th Symposium on Operating Systems Principles},
  year = {2015},
  doi = {10.1145/2815400.2815428},
  url = {https://www.microsoft.com/en-us/research/publication/ironfleet-proving-practical-distributed-systems-correct/}
}