Peter G. Neumann Requirements-Related Risks in Critical Systems. 3- 2000 ICRE http://computer.org/proceedings/icre/0565/05650003abs.htm db/conf/icre/icre2000.html#Neumann00