Deriving safety requirements using scenarios | IEEE Conference Publication | IEEE Xplore