Formal specification and verification of a real-time kernel | IEEE Conference Publication | IEEE Xplore