4.7 Dependable System Design