Nancy G. Leveson An Approach to Designing Safe Embedded Software. 15-29 2002 conf/emsoft/2002 EMSOFT http://dx.doi.org/10.1007/3-540-45828-X_2 db/conf/emsoft/emsoft2002.html#Leveson02