On the Correctness of Gossip-Based Membership Protocols door André Allavena