Robyn R. Lutz Guy G. Helmer Michelle M. Moseman David E. Statezni Stephen R. Tockey Safety Analysis of Requirements for a Product Family. 24- 1998 conf/icre/1998 ICRE http://computer.org/proceedings/icre/8356/83560024abs.htm db/conf/icre/icre1998.html#LutzHMST98