Nancy G. Leveson Software Safety: In Embedded Computer Systems. 34-46 1991 34 Commun. ACM 2 db/journals/cacm/cacm34.html#Leveson91