Author: Safety-Critical Systems Symposium (5th 1997 Brighton, England)