The SSP: an example of high-assurance systems engineering | IEEE Conference Publication | IEEE Xplore