Specification and verification in the field: Applying formal methods to BPF just-in-time compilers in the Linux kernel

Scaling symbolic evaluation for automatedverification of systems code with Serval

Hyperkernel – A push-button approach to building provably correct OS kernels