Conclusions
Formal Methods are accessible
Tools are adequate
Significant components of an OS can be checked
Results can apply directly to the implementation
Previous
Next
Index
Picture