John Penix Willem Visser Seungjoon Park Corina S. Pasareanu Eric Engstrom Aaron Larson Nicholas Weininger Verifying Time Partitioning in the DEOS Scheduling Kernel. 103-135 2005 26 Formal Methods in System Design 2 http://dx.doi.org/10.1007/s10703-005-1490-4 db/journals/fmsd/fmsd26.html#PenixVPPELW05