Nancy_G.__Leveson
Analyzing software specifications for mode confusion potential
Intent specifications: An approach to building human-centered specifications
Requirements specification for process-control systems
Spectrm: A cad system for digital automation