Miguel Castro, Manuel Costa, and Antony Rowstron June 2004
In Proceedings of the International Conference on Dependable Systems and Networks (DSN-2004)