A Study of Linux File System Evolution
seL4: formal verification of an OS kernel