Ravishankar K. Iyer Daniel Lenoski Joe Hingston Angelo Pruscino Jim Shaffer Eric Scott Dependability of Commercial Systems. 537-540 1995 FTCS db/conf/ftcs/ftcs95.html#IyerLHPSS95