Gerald Kotonya Ian Sommerville Integrating safety analysis and requirements engineering. 259-271 1997 conf/apsec/1997 APSEC http://doi.ieeecomputersociety.org/10.1109/APSEC.1997.640183 db/conf/apsec/apsec1997.html#KotonyaS97