Derek Mannering Jon G. Hall Lucia Rapanotti Towards Normal Design for Safety-Critical Systems. 398-411 2007 conf/fase/2007 FASE http://dx.doi.org/10.1007/978-3-540-71289-3_30 db/conf/fase/fase2007.html#ManneringHR07