Author: Safety-Critical Systems Symposium (9th 2001 Bristol, England)