Gary Johnson John Calvert Kelly J. Hayhurst John Janeri Herbert Hecht System Requirements and Analysis Issues for High Assurance Systems. 60- 1998 conf/hase/1998 HASE http://dlib.computer.org/conferen/hase/9221/pdf/92210060.pdf db/conf/hase/hase1998.html#JohnsonCHJH98