Software methodology for development of a trusted BMS: identification of critical problems. - Stephen D. Crocker; Emilie J. Siarkiewicz (ACSAC, 1989)