The VFiasco approach for a verified operating system Michael Hohmuth, Hendrik Tews [Google Scholar] [DBLP] [Citeseer] 2nd PLOS 2005 Topic(s): verification os