@techreport{Elkaduwe_KE_07:tr, address = {Sydney}, author = {Elkaduwe, Dhammika and Klein, Gerwin and Elphinstone, Kevin}, institution = {NICTA}, keywords = {sel4, access control, proof, isabelle/hol}, month = oct, number = {NRL-1474}, paperurl = {https://trustworthy.systems/publications/nicta_full_text/1474.pdf}, title = {Verified Protection Model of the {seL4} Microkernel}, year = {2007} }