Robert M. Geist

• Sufficiency and necessity in reliability modeling
• Towards conservative reliability predictions for real-time software