fault tolerant system modeling