The use of self checks and voting in software error detection: An empirical study (1990)

by Nancy G Leveson, Stephen S Cha, John C Knight, Timothy J Shimeall
Venue:IEEE Transactions on Software Engineering