Towards a formally verified microkernel using the Frama-C toolset - Carloto, Carlos José Abreu Dias da Silva (2010)