Peter G. Neumann Developing Complex Software for Critical Systems. 117-131 1992 GI Jahrestagung db/conf/gi/gi92.html#Neumann92