An Introduction to System Safety Engineering - Nancy G. Leveson