Dan Craigen Mark Saaltink Steve Michell Ada 95 and Critical Systems: An Analytical Approach. 171-182 1996 conf/adaEurope/1996 Ada-Europe db/conf/adaEurope/adaEurope1996.html#CraigenSM96 http://dx.doi.org/10.1007/BFb0013487