Risk-Based Validation Strategies for Software Upgrades