Evaluation of Safety-Critical Software. - David Lorge Parnas; A. John van Schouwen; Shu Po Kwan (Commun. ACM, 1990)