Analyzing Safety-Critical Systems Using Extended Fault Trees