Architecting resilient systems accident avoidance and survival and recovery from disruptions - Jackson, Scott (Wiley series in systems engineering and management, 2010)