V. T. Thomas Ten practical techniques for high assurance systems engineering. 55-56 1996 conf/hase/1996 HASE http://computer.org/proceedings/hase/7629/76290055abs.htm db/conf/hase/hase1996.html#Thomas96