A Model of Recoverability in Multilevel Systems | IEEE Journals & Magazine | IEEE Xplore