Formal Verification of a Redundancy Management Algorithm
Guidance Software Development Workshop
NATO reqiurements as referred to risk in executed contracts
Military and Civil Software Standards and Guidelines for Guidance and Control
Failure mode, effect and criticality analysis
Complex system modelling with fault trees and stochastic processes