Premkumar T. Devanbu Philip W. L. Fong Stuart G. Stubblebine Techniques for Trusted Software Engineering. 126-135 1998 ICSE db/conf/icse/icse98.html#DevanbuFS98