Fault tree analysis method