Systems analysis by sequential fault trees