Bill Stoddart Dominique Cansell Frank Zeyda Modelling and Proof Analysis of Interrupt Driven Scheduling. 155-170 2007 conf/b/2007 B http://dx.doi.org/10.1007/11955757_14 db/conf/b/b2007.html#StoddartCZ07