Functional decomposition and interactions in hybrid intrusion-tolerant systems - Hans Reiser (2009)