SAE/TP 2009-01-3284 (PDF) Challenges in Validating Safety-Critical Embedded Systems whitebackgroundstudio 5 years ago