Principles of remote attestation
seL4: formal verification of an OS kernel