Author: IEEE High-Assurance Systems Engineering Workshop (2nd 1997 Washington, D.C.)