Author: Safety-Critical Systems Symposium (6th 1998 Birmingham, England)