1. [1] N. Marti, R. Affeldt, and A. Yonezawa, “Model-checking of a Multithreaded Operating System,” 23rd Workshop of the Japan Society for Software Science and Technology, University of Tokyo, Tokyo, Japan, http://staff.aist.go.jp/reynald.affeldt/documents/marti-jssst2006-en.pdf, 2006.
2. [2] T. Aoki, “Model checking multi-task software on real-time operating systems,” 2008 11th IEEE International Symposium on Object and Component-Oriented Real-Time Distributed Computing (ISORC), IEEE, pp.551-555, 2008. 10.1109/isorc.2008.46
3. [3] G.J. Holzmann, The SPIN model checker: Primer and reference manual, Addison-Wesley Reading, vol.1003, 2004.
4. [4] K.G. Larsen, P. Pettersson, and W. Yi, “UPPAAL in a nutshell,” International Journal on Software Tools for Technology Transfer (STTT), vol.1, no.1-2, pp.134-152, 1997. 10.1007/s100090050010
5. [5] OSEK Group and others, “OSEK/VDX Operating System Specification,” http://portal.osek-vdx.org, 2005.