Specification and Verification of the ASOS Kernel. - Ben L. Di Vito; Paul H. Palmquist; Eric R. Anderson 001; Michael L. Johnston (S&P, 1990)