Specification of safety and realibility requirements for control systemsMõtus, LeoDagstuhl Seminar 9509 : High Integrity Programmable Electronics Systems, February 27-March 03, 19951995