Dumitras T, Kavulya S, Narasimhan P.  2008.  A Fault Model for Upgrades in Distributed Systems (CMU-PDL-08-115). Parallel Data Laboratory.