Reasoning about uncertainty in fault-tolerant distributed systems (1988)

by M J Fischer, L D Zuck