Software safety: Why, what, and how (1986)

by Nancy G Leveson
Venue:ACM Comput. Surv