Liz Whiting Mike Hill Safety Analysis of Hawk in Flight Monitor. 32-38 1999 PASTE http://doi.acm.org/10.1145/316158.316173 db/conf/paste/paste99.html#WhitingH99