Similar Items: Validation of a microkernel : a case study

Similar Items: The language approach to the development of reliable concurrent programs