@inproceedings{Andronick_GE_10, address = {Vancouver, Canada }, author = {Andronick, June and Greenaway, David and Elphinstone, Kevin}, booktitle = {Systems Software Verification}, editor = {{Ralf Huuck, Gerwin Klein, Bastian Schlich}}, month = oct, pages = {9}, paperurl = {https://trustworthy.systems/publications/nicta_full_text/3997.pdf}, publisher = {USENIX}, title = {Towards proving security in the presence of large untrusted components}, year = {2010} }