High integrity software - Sorensen, I; Neilson, D (2001)