Changing safety-critical software | IEEE Journals & Magazine | IEEE Xplore