Paulo Veríssimo Design of fault tolerant distributed systems: the fail-controlled approach. 1990 conf/sigopsE/1990 ACM SIGOPS European Workshop http://doi.acm.org/10.1145/504136.504172 db/conf/sigopsE/sigopsE1990.html#Verissimo90