Author: NATO Advanced Study Institute on Proof and System-Reliability (2001 Marktoberdorf, Germany)