Author: Safety-Critical Systems Symposium (17th 2009 Brighton, England)