Construction of a Highly Dependable Operating System
an empirical study of operating system errors .