N. B. Leveson
Information and Computer Science Dept., University of California, Irvine, Irvine, CA
Software safety: why, what, and how
ACM Computing Surveys (CSUR)