Author: Germany) NATO Advanced Study Institute on Software Systems Safety (2013 Marktoberdorf