Author: IEEE High-Assurance Systems Engineering Workshop (1st 1996 Ontario, Canada)