A procedure for risk management with reference to software | IEEE Conference Publication | IEEE Xplore