AutoFOCUS 3: Tooling Concepts for Seamless, Model-based Development of Embedded Systems
the goal structuring notation - a safety argument notation .