William E. Howden: Good Enough versus High Assurance Software Testing and Evaluation Methods. HASE 1998: 166-177