Brian Randell System Structure for Software Fault Tolerance. 221-232 1975 1 IEEE Trans. Software Eng. 2 db/journals/tse/tse1.html#Randell75