Author: Safety-Critical Systems Symposium (3rd 1995 Brighton, England)