Dirk Leinenbach Thomas Santen Verifying the Microsoft Hyper-V Hypervisor with VCC. 806-809 2009 FM http://dx.doi.org/10.1007/978-3-642-05089-3_51 conf/fm/2009 db/conf/fm/fm2009.html#LeinenbachS09