A Formal Specification of Operating System based on ARINC 653

In this paper, by using the formal language \emph{Circus}, we give a formal specification of an operating system based on ARINC 653 standard. Our specification includes interrupt handling, time and memory management, partition and process scheduling, system call response and related APEX services. Especially, the concurrent behaviours of partitions and processes are also specified.