A Generic Method for a Bottom-Up ASIL Decomposition
Model-Based Safety Analysis for Vehicle Guidance Systems