Reasoning about Safety during Software Architecture Design. - Tacksoo Im; Soujanya Vullam; John D. McGregor (SEDE, 2010)