Jomaa, N.; Torrini, P.; Nowak, D.; Grimaud, G.; Hym, S. Proof-Oriented Design of a Separation Kernel With Minimal Trusted Computing Base. eceasst 2019, 76.