@inproceedings{Elkaduwe_KE_08,
  author =      {Dhammika Elkaduwe and Gerwin Klein and Kevin Elphinstone},
  title =       {Verified Protection Model of the {seL4} Microkernel},
  booktitle = {Second IFIP Working Conference on
  Verified Software: Theories, Tools, and Experiments (VSTTE 2008)},
  editor =      {Jim Woodcock and Natarajan Shankar},
  address =     {Toronto, Canada},
  publisher =   {Springer},
  year =         2008,
  month =        oct,
  series =      {LNCS},
  pages =     {99--114},
  volume =    5295,
}