Nancy G. Leveson Mats Per Erik Heimdahl Jon Damon Reese Designing Specification Languages for Process Control Systems: Lessons Learned and Steps to the Future. 127-145 1999 conf/esec/1999 ESEC / SIGSOFT FSE http://link.springer.de/link/service/series/0558/bibs/1687/16870127.htm db/conf/esec/esec99.html#LevesonHR99