SAE/TP 2007-01-3854 (PDF) Safety Assurance of Distributed System Architecture in Air Traffic Control Applications