John Donaldson Analyzing Systems Failures through the Use of Case Histories. 105-114 2004 conf/isese/2004 ISESE http://doi.ieeecomputersociety.org/10.1109/ISESE.2004.11 db/conf/isese/isese2004.html#Donaldson04