Independently Assessing Legacy Safety Systems. - Paul Edwards; Andrew Furse; Andrew Vickers (SSS, 2007)