Safety models: an analytical tool for risk analysis of medical device systems | IEEE Conference Publication | IEEE Xplore