Structure For Dependability door Denis Besnard & Cliff Jones