Nancy G. Leveson, Stephen S. Cha, Timothy J. Shimeall: Safety Verification of Ada Programs Using Software Fault Trees. IEEE Softw. 8(4): 48-59 (1991)