Specifying a Recovery Model for Survivable System | IEEE Conference Publication | IEEE Xplore