1. The Coq proof assistant. https://coq.inria.fr/. The Coq proof assistant. https://coq.inria.fr/.
2. Department of Defense Trusted Computer System Evaluation Criteria, pages 1--129. Palgrave Macmillan UK , London , 1985 . Department of Defense Trusted Computer System Evaluation Criteria, pages 1--129. Palgrave Macmillan UK, London, 1985.
3. Lecture Notes in Computer Science;Baranowski Marek,2018
4. Mike Barnett , Bor-Yuh Evan Chang , Robert DeLine , Bart Jacobs , and K. Rustan M. Leino . Boogie : A modular reusable verifier for object-oriented programs. In Frank S. de Boer, Marcello M. Bonsangue, Susanne Graf, and Willem-Paul de Roever, editors , Formal Methods for Components and Objects: 4th International Symposium, FMCO 2005 , pages 364 -- 387 , Berlin, Heidelberg , 2006 . Springer Berlin Heidelberg. Mike Barnett, Bor-Yuh Evan Chang, Robert DeLine, Bart Jacobs, and K. Rustan M. Leino. Boogie: A modular reusable verifier for object-oriented programs. In Frank S. de Boer, Marcello M. Bonsangue, Susanne Graf, and Willem-Paul de Roever, editors, Formal Methods for Components and Objects: 4th International Symposium, FMCO 2005, pages 364--387, Berlin, Heidelberg, 2006. Springer Berlin Heidelberg.
5. Ankit Bhardwaj , Chinmay Kulkarni , Reto Achermann , Irina Calciu , Sanidhya Kashyap , Ryan Stutsman , Amy Tai , and Gerd Zellweger . Nros : Effective replication and sharing in an operating system . In 15th USENIX Symposium on Operating Systems Design and Implementation, OSDI '21 , pages 295 -- 312 . USENIX Association , July 2021 . Ankit Bhardwaj, Chinmay Kulkarni, Reto Achermann, Irina Calciu, Sanidhya Kashyap, Ryan Stutsman, Amy Tai, and Gerd Zellweger. Nros: Effective replication and sharing in an operating system. In 15th USENIX Symposium on Operating Systems Design and Implementation, OSDI '21, pages 295--312. USENIX Association, July 2021.