1999: /Braberman, 1999/ Verification of Real Time Designs: Combining Scheduling Theory with Automatic Formal Verification /Penix, 2000/ Verification of Time Partitioning in the DEOS Scheduler Kernel
1998: /Fong, 1998/ Proof Linking: An Architecture for Modular Verification of Dynamically-Linked Mobile Code