Vincenzo Grassi Dependability Evaluation of Hierarchical Systems. 207-233 1994 31 Acta Inf. 3 db/journals/acta/acta31.html#Grassi94