The Architecture of a Secure Group Communication System based on Intrusion Tolerance - Miguel Correia (2001)