@article{Daum_BK_14,
    author           = {Daum, Matthias and Billing, Nelson and Klein, Gerwin},
    doi              = {10.1007/s00165-014-0296-9},
    journal          = {Formal Aspects of Computing},
    keywords         = {trustworthy systems; refinement proof; microkernel correctness; isabelle/hol},
    month            = oct,
    number           = {6},
    pages            = {1205--1229},
    paperurl         = {https://trustworthy.systems/publications/nicta_full_text/7114.pdf},
    title            = {Concerned with the Unprivileged: User Programs in Kernel Refinement},
    volume           = {26},
    year             = {2014}
  }