Formal Models of Operating System Kernels - Craig, I. (Springer London, 2007)