An experimental evaluation of the assumption of independence in multiversion programming (1986)

by J C Knight, N G Leveson
Venue:IEEE Tronsactiorw on Software Enginesri,g