Software for dependable systems sufficient evidence? - Jackson, Daniel; Millett, Lynette I.; Thomas, Martyn (National Academies Press, 2007)