Safeware system safety and computers - Leveson lhNancy (1995)