Fault tolerant system design - Levi (McGraw-Hill, 1994)