BFL: a Logic to Reason about Fault Trees | IEEE Conference Publication | IEEE Xplore