On the Achievement of a Highly Dependable and Fault-Tolerant Air Traffic Control System. - Algirdas Avizienis; Danforth E. Ball (Computer, 1987)