@inproceedings{Elkaduwe_KE_08, address = {Toronto, Canada }, author = {Elkaduwe, Dhammika and Klein, Gerwin and Elphinstone, Kevin}, booktitle = {Verified Software: Theories, Tools and Experiments}, editor = {{Natarajan Shankar and Jim Woodcock}}, isbn = {3540878726}, month = oct, pages = {99--115}, paperurl = {https://trustworthy.systems/publications/nicta_full_text/209.pdf}, publisher = {Springer}, title = {Verified Protection Model of the {seL4} Microkernel}, year = {2008} }