Author: Workshop on Object-Oriented Real-Time Dependable Systems 1997 Newport