Highly Reliable Upgrading of Components. - Jonathan E. Cook 001; Jeffrey A. Dage (ICSE, 1999)