An Introduction to Verification of Visualization Techniques
seL4: formal verification of an OS kernel