Author: Safety-Critical Systems Symposium (2nd 1994 Birmingham, England)