Modeling the dependability of CAUTRA, a subset of the French air traffic control system | IEEE Conference Publication | IEEE Xplore