AMBOSS: A Task Modeling Approach for Safety-Critical Systems. - Matthias Giese; Tomasz Mistrzyk; Andreas Pfau; Gerd Szwillus; Michael von Detten (TAMODIA/HCSE, 2008)