T. Anderson, P. A. Barrett, D. Halliwell, and M. R. Moulding, Software-Fault Tolerance: An Evaluation, IEEE Tr. Soft. Eng, vol.12, issue.11, pp.1502-1510, 1985.

J. Arlat, K. Kanoun, and J. C. Laprie, Dependability Evaluation of Software Fault-Tolerance, Proc. FTCS-18, pp.142-147, 1988.

A. Avizienis and J. P. Kelly, Fault-Tolerance by Design Diversity: Concepts and Experiments, Computer, pp.67-80, 1984.

A. Avizienis, P. Gunninberg, J. P. Kelly, R. T. Lyu, L. Strigini et al., Software Fault-Tolerance by Design Diversity-DEDIX: A Tool for Experiments, Proc. SAFECOMP'85, pp.173-178, 1985.

A. Avizienis and J. C. Laprie, Dependable Computing: From Concepts to Design Diversity, Proc IEEE, vol.74, issue.5, pp.629-638, 1986.

P. Bishop and F. D. Pullen, PODS-A Study of Software Failure Behavior, Proc. FTCS-18, pp.2-8, 1988.

S. D. Cha, A Recovery Block Model and its Analysis, Proc. SAFECOMP'86, pp.21-26, 1986.

L. Chen and A. Avizienis, N-Version Programming: A Fault-Tolerance Approach to Reliability of Software Operation, Proc. FTCS8, pp.3-9, 1978.

R. C. Cheung, A User-Oriented Software Reliability Model, IEEE Tr. Soft. Eng, issue.2, pp.118-125, 1985.

D. E. Eckhardt and L. D. Lee, A Theoretical Basis for the Analysis of Multiversion Software Subject to Coincident Errors, IEEE Tr. Soft. Eng, vol.12, issue.11, pp.1511-1517, 1985.

W. Feller, An Introduction to Probability Theory and its Application, vol.I, 1968.

J. N. Gray, Why do computers stop and what can be done about it?, Proc. 5th SRDSDS, pp.3-12, 1986.

A. Grnarov, J. Arlat, and A. Avizienis, On the Performance of Software Fault-Tolerance Strategies, Proc. FTCS10, pp.251-253, 1980.

H. Hecht, Fault Tolerant Software, IEEE Tr. Rel, issue.3, pp.227-232, 1979.

J. C. Knight, N. G. Leveson, L. D. St, and . Jean, A Large Scale Experiment in N-Version Programming, Proc. FTCS15, pp.135-139, 1985.

J. C. Knight and N. G. Leveson, An Empirical Study of Failure Probabilities in Multi-Version Software, Proc. FTCS16, pp.165-170, 1986.

J. C. Laprie, Dependability Evaluation of Software Systems in Operation, IEEE Tr. Soft. Eng, issue.6, pp.701-714, 1984.

J. C. Laprie, Dependable Computing and Fault-Tolerance: Concepts and Terminology, IEEE Transactions on Computers. Special Issue on Fault-Tolerant Computing, vol.39, pp.504-513, 1990.

, Proc. FTCS15, pp.2-11, 1985.

J. C. Laprie, J. Arlat, C. Beounes, K. Kanoun, and C. Hourtolle, Hardware-and Software-Fault Tolerance: Definition and Analysis of Architectural Solutions, Proc. FTCS17, pp.116-121, 1987.

B. Littlewood, Software Reliability Model for Modular Program Structure, IEEE Tr. Rel, pp.241-246, 1985.

B. Littlewood and D. R. Miller, A Conceptual Model of Multi-Version Software, Proc. FTCS-17, pp.150-155, 1987.

P. R. Lorczak, A. K. Caglayan, and D. E. Eckhardt, A Theoretical Investigation of Generalized voters for Redundant Systems, Proc. FTCS-19, pp.444-451, 1989.

M. Mulazzani, Reliability Versus Safety, Proc. SAFECOMP'85, pp.141-1146, 1985.

A. Pagès and M. Gondran, Fiabilité des systèmes, 1980.

B. Randell, System Structure for Software Fault Tolerance, IEEE Tr. Soft. Eng, issue.2, pp.220-232, 1975.

F. Saglietti and W. Ehrenberger, Software Diversity-Some Considerations about its Benefits and its Limitations, Proc. SAFECOMP'86, pp.27-34, 1986.

R. K. Scott, J. W. Gault, and D. F. Mcallister, Fault-Tolerant Software Reliability Modeling, IEEE Tr. Soft. Eng, vol.13, pp.582-592, 1987.

K. S. Tso, A. Avizienis, and J. P. Kelly, Error Recovery in Multi-Version Software, Proc. SAFECOMP'86, pp.35-41, 1986.