Affordable trustworthy-systems
Microkernel design
From L3 to seL4: What have we learnt in 20 years of L4 microkernels
seL4 intro
