Formally verifying an RTOS scheduling monitor IP core in embedded systems | IEEE Conference Publication | IEEE Xplore