Hans Rischel, Jorge Cuéllar, Simon Mørk, Anders P. Ravn, Isolde Wildgruber: Development of Safety-Critical Real-Time Systems. SOFSEM 1995: 206-235