Jennifer Morris Philip Koopman Representing design tradeoffs in safety-critical systems. 1-5 2005 30 ACM SIGSOFT Software Engineering Notes 4 http://doi.acm.org/10.1145/1082983.1083228 db/journals/sigsoft/sigsoft30.html#MorrisK05