[
  {
    "id": "cs-05-1",
    "type": "paper-conference",
    "title": "seL4: formal verification of an OS kernel",
    "author": [
      {
        "given": "Gerwin",
        "family": "Klein"
      },
      {
        "given": "Kevin",
        "family": "Elphinstone"
      },
      {
        "given": "Gernot",
        "family": "Heiser"
      },
      {
        "given": "June",
        "family": "Andronick"
      },
      {
        "given": "David",
        "family": "Cock"
      },
      {
        "given": "Philip",
        "family": "Derrin"
      },
      {
        "given": "Dhammika",
        "family": "Elkaduwe"
      },
      {
        "given": "Kai",
        "family": "Engelhardt"
      },
      {
        "given": "Rafal",
        "family": "Kolanski"
      },
      {
        "given": "Michael",
        "family": "Norrish"
      },
      {
        "given": "Thomas",
        "family": "Sewell"
      },
      {
        "given": "Harvey",
        "family": "Tuch"
      },
      {
        "given": "Simon",
        "family": "Winwood"
      }
    ],
    "container-title": "Proceedings of the ACM SIGOPS 22nd symposium on Operating systems principles",
    "issued": {
      "date-parts": [
        [
          2009
        ]
      ]
    },
    "DOI": "10.1145/1629575.1629596",
    "URL": "https://sel4.org/Research/pdfs/sel4-formal-verification-os-kernel.pdf"
  },
  {
    "id": "cs-05-2",
    "type": "paper-conference",
    "title": "CertiKOS: An Extensible Architecture for Building Certified Concurrent OS Kernels",
    "author": [
      {
        "given": "Ronghui",
        "family": "Gu"
      },
      {
        "given": "Zhong",
        "family": "Shao"
      },
      {
        "given": "Hao",
        "family": "Chen"
      },
      {
        "given": "Xiongnan",
        "family": "Wu"
      },
      {
        "given": "Jieung",
        "family": "Kim"
      },
      {
        "given": "Vilhelm",
        "family": "Sjoberg"
      },
      {
        "given": "David",
        "family": "Costanzo"
      }
    ],
    "container-title": "USENIX OSDI",
    "issued": {
      "date-parts": [
        [
          2016
        ]
      ]
    },
    "DOI": "",
    "URL": "https://www.usenix.org/conference/osdi16/technical-sessions/presentation/gu"
  },
  {
    "id": "cs-05-3",
    "type": "paper-conference",
    "title": "IronFleet: proving practical distributed systems correct",
    "author": [
      {
        "given": "Chris",
        "family": "Hawblitzel"
      },
      {
        "given": "Jon",
        "family": "Howell"
      },
      {
        "given": "Manos",
        "family": "Kapritsos"
      },
      {
        "given": "Jacob R.",
        "family": "Lorch"
      },
      {
        "given": "Bryan",
        "family": "Parno"
      },
      {
        "given": "Michael L.",
        "family": "Roberts"
      },
      {
        "given": "Srinath",
        "family": "Setty"
      },
      {
        "given": "Brian",
        "family": "Zill"
      }
    ],
    "container-title": "Proceedings of the 25th Symposium on Operating Systems Principles",
    "issued": {
      "date-parts": [
        [
          2015
        ]
      ]
    },
    "DOI": "10.1145/2815400.2815428",
    "URL": "https://www.microsoft.com/en-us/research/publication/ironfleet-proving-practical-distributed-systems-correct/"
  }
]