Safety critical computer systems - Storey, Neil (Addison-Wesley, 1996)