Colin Atkinson Daniel Brenner Giovanni Falcone Monika Juhasz Specifying High-Assurance Services. 64-71 2008 41 IEEE Computer 8 http://dx.doi.org/10.1109/MC.2008.308 db/journals/computer/computer41.html#AtkinsonBFJ08