Fault Injection in Production. - Allspaw, John (Communications of the ACM, 2012)