Combining Mechanized Proofs and Model-Based Testing in the Formal Analysis of a Hypervisor.
Hanno BeckerJuan Manuel CrespoJacek GalowiczUlrich HenselYoichi HiraiCésar KunzKeiko NakataJorge Luis SacchiniHendrik TewsThomas TuerkPublished in: FM (2016)