Deriving Functional Safety Requirements Using Undesired Combination State Templates | IEEE Conference Publication | IEEE Xplore