Rogério de Lemos Amer Saeed Tom Anderson A Train Set as a Case Study for the Requirements Analysis of Safety-Critical Systems. 30-40 1992 35 Comput. J. 1 db/journals/cj/cj35.html#LemosSA92