How dependable are distributed f fault/tolerant systems? - Paulo Sousa (2005)