E. Althammer, E. Schoitsch, G. Sonneck, H. Eriksson, and J. Vinter, Modular certification support -the DECOS concept of generic safety cases, pp.258-263, 2008.

J. Birch, R. Rivett, I. Habli, B. Bradshaw, J. Botham et al., Safety cases and their role in ISO 26262 functional safety assessment, SAFECOMP. LNCS, vol.8153, pp.154-165, 2013.

J. Birch, R. Rivett, I. Habli, B. Bradshaw, J. Botham et al., A layered model for structuring automotive safety arguments, European Dependable Computing Conference, 2014.

N. Bunkley, GM engineer says he didn't remember changing ignition switch part, 2014.

, Center for Devices and Radiological Health: Device approvals, denials and clearances 4, 2014.

P. Conmy, M. Nicholson, and J. Mcdermid, Safety assurance contracts for integrated modular avionics, 8th Australian Workshop on Safety Critical Systems and Software (SCS 2003), vol.33, pp.69-78, 2003.

, Concurrency Verification: Introduction to Compositional and Non-compositional Methods, 2007.

T. Dittel and H. Aryus, How to "Survive" a safety case according to ISO 26262, SAFECOMP 2010, vol.6351, pp.97-111, 2010.

J. Elmqvist and S. Nadjm-tehrani, Tool support for incremental failure mode and effects analysis of component-based systems, pp.921-927, 2008.

, Federal Aviation Administration: Ac20-148: Software reusable components, 2004.

D. M. Gabbay and J. Woods, Handbook of the History of Logic: The Many Valued and Nonmonotonic Turn in Logic, vol.8, 2007.

L. Groeger, Four medical implants that escaped FDA scrutiny, 2012.

G. Gutierrez, GM chose not to implement a fix for ignition problem, NBC News, vol.13, 2014.

J. A. Hatcliff, I. Lee, A. Macdonald, F. Anura, M. Robkin et al., Rationale and architecture principles for medical application platforms, ICCPS 2012, pp.3-12, 2012.

M. Holloway, Making the implicit explicit, ISSC 2013. Boston (2013) 16. Internatiional Standard Organization: ISO 26262: Road vehicles -Functional safety, 2011.

C. W. Johnson, What are emergent properties and how do they affect the engineering of complex systems?, Rel. Eng. & Sys. Safety, vol.91, issue.12, pp.1475-1481, 2006.

O. Lisagor and T. Kelly, Incremental safety assessment: Theory and practice, Proceedings of 26th International System Safety Conference, 2008.

R. Palin, D. Ward, I. Habli, and R. Rivett, ISO 26262 safety cases -Compliance and assurance, Procedings of 6th IET International Conference on System Safety, pp.1-6, 2011.

T. Spangler, Delphi told GM Ignition Switch Didn't Meet Specs, 2014.

H. Thompson, Researchers say DePuy hip ancestry shows 510(k) flaws, 2013.

S. E. Toulmin, The Uses of Argument, 2003.

W. Vincenti, What Engineers Know and How They Know It: Analytical Studies from Aeronautical History, 1993.

M. Wald and W. Vlasic, Upset' GM engineer spoke in house inquiry. The New York Times 28, 2014.