Rethinking operating system design: asymmetric multiprocessing for security and performance
Comprehensive formal verification of an OS microkernel