Author: Safety-Critical Systems Symposium (11th 2003 Bristol, England)