The infeasibility of quantifying the reliability of life-critical real-time software (1993)

by R W Butler, G B Finelli
Venue:IEEE Transactions on Software Engineering