Author: Germany) NATO Advanced Study Institute on Engineering Dependable Software Systems (2012 Marktoberdorf