Model-driven development for safety-critical projects in intelligent energyPaul FechtelkotterGraham Bleakleyet al.2013SPEIE 2013