Analyzing and improving Linux kernel memory protection: a model checking approach
KLEE: Unassisted and Automatic Generation of High-Coverage Tests for Complex Systems Programs