Jon G. Hall Lucia Rapanotti Assurance-Driven Design. 379-388 2008 ICSEA http://dx.doi.org/10.1109/ICSEA.2008.69 conf/icsea/2008 db/conf/icsea/icsea2008.html#HallR08