@inproceedings{Andronick_10,
    address          = {Paris},
    author           = {Andronick, June},
    booktitle        = {International Conference on Formal Verification of Object-Oriented Software},
    editor           = {{Bernhard Beckert and Claude March\'e}},
    month            = dec,
    pages            = {1--9},
    paperurl         = {https://trustworthy.systems/publications/nicta_full_text/4002.pdf},
    publisher        = {Lecture Notes in Computer Science},
    title            = {From a proven correct microkernel to trustworthy large systems},
    year             = {2010}
  }