@article{Klein_AEMSKH_14,
    author           = {Klein, Gerwin and Andronick, June and Elphinstone, Kevin and Murray, Toby and Sewell, Thomas and
                        Kolanski, Rafal and Heiser, Gernot},
    doi              = {10.1145/2560537},
    journal          = {ACM Transactions on Computer Systems},
    keywords         = {sel4, isabelle/hol, verification, microkernel},
    month            = feb,
    number           = {1},
    pages            = {2:1-2:70},
    paperurl         = {https://trustworthy.systems/publications/nicta_full_text/7371.pdf},
    title            = {Comprehensive Formal Verification of an {OS} Microkernel},
    volume           = {32},
    year             = {2014}
  }