Since life-testing of ultrareliable software is infeasible (i.e., … software have been developed from which ultrareliable estimates … This assumption [of independent failure] is not reasonable for software … between the multiple versions cannot be justified experimentally. … errors in two or more versions that appear …
Google-1
Google-2
Copyright clearance needed for quotation.