Modelling real-world issues for dependable software - Dobson, John E. (1988)