Toby C. Murray, Daniel Matichuk, Matthew Brassil, Peter Gammie, Gerwin Klein: Noninterference for Operating System Kernels. CPP 2012: 126-142