Sfety- Critical Computer Systems - Neil Stoney (Addison-Wesley New York, 1996)