Safety Analysis of Requirements for a Product Family. - Robyn R. Lutz; Guy G. Helmer; Michelle M. Moseman; David E. Statezni; Stephen R. Tockey (ICRE, 1998)