A Failure-Pass Model Based Method for Safety Analysis of Flight Control System | IEEE Conference Publication | IEEE Xplore