Design of dependable Ada software - Motet, G. (Prentice Hall, 1996)