Argument-based approach to computer system safety engineering. (1st January 2012)