Alessandro Daidone Silvano Chiaradonna Andrea Bondavalli Paulo Veríssimo Analysis of a Redundant Architecture for Critical Infrastructure Protection. 78-100 2007 WADS http://dx.doi.org/10.1007/978-3-540-85571-2_4 conf/icse/2007wads db/conf/icse/wads2007.html#DaidoneCBV07