Dependability of Critical Computer Systems 1