Qualitative and quantitative formal model-based safety analysis - push the safety button - Güdemann, Matthias (2011)