Author: IEEE High-Assurance Systems Engineering Workshop (3rd 1998 Washington, D.C.)