A three-fold approach towards increased assurance levels for interactive systems: a flight control unit case study.