. La-fonction-d, eau du condenseur est réalisée par les trois pompes d'extraction (CEX), fonctionnant en redondance 2/3. En situation normale, deux des pompes sont en fonctionnement, la troisième en attente. En cas de défaillance d'une des pompes en fonctionnement

M. Alam and U. M. , Quantitative Reliability Evaluation of Repairable Phased-Mission Systems Using Markov Approach, IEEE Transactions on Reliability, vol.35, issue.5, pp.498-503, 1986.
DOI : 10.1109/TR.1986.4335529

G. Aubry, A. Babykina, N. Barros, G. Brinzei, and . Deleuze, Rapport final du projet APPRODYN : APPROches de la fiabilité DYNamique pour modéliser des systèmes critiques, 2012.

P. Azema, G. Juanole, E. Sanchis, and M. Montbernard, Specification and verification of distributed systems using prolog interpreted petri nets, Proceedings of the 7th international conference on Software engineering, pp.510-518, 1984.

J. [. Bouissou and . Bon, A new formalism that combines advantages of fault-trees and Markov models: Boolean logic driven Markov processes, Reliability Engineering & System Safety, vol.82, issue.2, pp.149-163, 2003.
DOI : 10.1016/S0951-8320(03)00143-1

M. Bouissou, H. Bouhadana, M. Bannelier, and N. Villatte, Knowledge modelling and reliability processing : Presentation of the FIGARO language and associated tools, IFAC/IFIP/EWICS/SRE Symposium,Safecomp'91, pp.69-75, 1991.

P. [. Barlow and . Chatterjee, Introduction to fault tree analysis, 1973.

P. [. Boudali, M. Crouzen, and . Stoelinga, A Compositional Semantics for Dynamic Fault Trees in Terms of Interactive Markov Chains, Lecture Notes in Computer Science, vol.4762, p.441, 2007.
DOI : 10.1007/978-3-540-75596-8_31

J. [. Boudali and . Dugan, A discrete-time Bayesian network reliability modeling and analysis framework, Reliability Engineering & System Safety, vol.87, issue.3, pp.337-349, 2005.
DOI : 10.1016/j.ress.2004.06.004

J. [. Birnbaum, . W. Esary-[-bes61-]-z, J. D. Birnbaum, S. C. Esary, and . Saunders, Modules of Coherent Binary Systems, Journal of the Society for Industrial and Applied Mathematics, vol.13, issue.2, pp.444-46255, 1961.
DOI : 10.1137/0113027

]. M. Bou06 and . Bouissou, Détermination efficace de scenarii minimaux de défaillance pour des systèmes séquentiels, 15ème colloque de fiabilité et maintenabilité, 2006.

]. M. Bou08 and . Bouissou, Gestion de la complexité dans les études quantitatives de sûreté de fonctionnement de systèmes, 2008.

A. Bobbio, L. Portinale, M. Minichino, and E. Ciancamerla, Improving the analysis of dependable systems by mapping fault trees into Bayesian networks, Reliability Engineering & System Safety, vol.71, issue.3, pp.249-260, 2001.
DOI : 10.1016/S0951-8320(00)00077-6

D. [. Bobbio and . Raiteri, Parametric fault trees with dynamic gates and repair boxes, Annual Symposium Reliability and Maintainability, 2004, RAMS, pp.459-465, 2004.
DOI : 10.1109/RAMS.2004.1285491

A. [. Barlow and . Wu, Coherent Systems with Multi-State Components, Mathematics of Operations Research, vol.3, issue.4, pp.275-281, 1978.
DOI : 10.1287/moor.3.4.275

G. Chiola, C. Dutheillet, G. Franceschinis, and S. Haddad, Stochastic well-formed colored nets and symmetric modeling applications, IEEE Transactions on Computers, vol.42, issue.11, pp.1343-1360, 1993.
DOI : 10.1109/12.247838

. [. Codetta-raiteri, The Conversion of Dynamic Fault Trees to Stochastic Petri Nets, as a case of Graph Transformation, Electronic Notes in Theoretical Computer Science, vol.127, issue.2, pp.45-60, 2005.
DOI : 10.1016/j.entcs.2005.02.005

K. [. Coppit, J. B. Sullivan, and . Dugan, Formal semantics of models for computational engineering: a case study on dynamic fault trees, Proceedings 11th International Symposium on Software Reliability Engineering. ISSRE 2000, pp.270-282, 2000.
DOI : 10.1109/ISSRE.2000.885878

S. [. Dugan, M. A. Bavuso, and . Boyd, Fault trees and sequence dependencies, Annual Proceedings on Reliability and Maintainability Symposium, pp.286-293, 1990.
DOI : 10.1109/ARMS.1990.67971

[. Dugan, M. Bavuso, and . Boyd, Dynamic fault-tree models for fault-tolerant computer systems, IEEE Transactions on Reliability, vol.41, issue.3, pp.363-377, 1992.
DOI : 10.1109/24.159800

B. Delamare, Y. Gardan, and P. Moreaux, Efficient implementation for performance evaluation of synchronous decomposition of high level stochastic Petri nets, Proc. ICALP2003 Workshop on Stochastic Petri Nets and Related Formalisms, pp.164-183, 2003.

A. [. Dutuit and . Rauzy, A linear-time algorithm to find modules of fault trees, IEEE Transactions on Reliability, vol.45, issue.3, pp.422-425, 1996.
DOI : 10.1109/24.537011

J. [. Dugan-salvatore and . Bechta, Fault trees and Markov models for reliability analysis of fault-tolerant digital systems, Reliability Engineering & System Safety, vol.39, issue.3, pp.291-307, 1993.
DOI : 10.1016/0951-8320(93)90005-J

K. [. Dugan, D. Sullivan, and . Coppit, Developing a low-cost high-quality software tool for dynamic fault-tree analysis, IEEE Transactions on Reliability, vol.49, issue.1, pp.49-59, 2000.
DOI : 10.1109/24.855536

]. J. Dug91 and . Dugan, Automated analysis of phased-mission reliability, IEEE Transactions on Reliability, vol.40, issue.1, pp.45-52, 1991.

J. Fussell, Fault Tree Analysis ??? Concepts and Techniques, Generic Techniques in System Reliability Assessment, 1976.
DOI : 10.1007/978-94-010-1553-0_13

J. [. Gulati and . Dugan, A modular approach for analyzing static and dynamic fault trees, Annual Reliability and Maintainability Symposium, 1997.
DOI : 10.1109/RAMS.1997.571665

]. R. How60 and . Howard, Dynamic programming and Markov process. The M.I, 1960.

]. F. Jen96 and . Jensen, An introduction to Bayesian networks, 1996.

[. Kleene, Representation of events in nearve nets and finite automata, Automata Studies, vol.34, pp.3-42, 1956.

G. [. Lisnianski, . G. Levitin-[-ls87-]-n, J. L. Leveson, and . Stolzy, Multi-state system reliability : assessment, optimization and applications Safety analysis using petri nets, IEEE Transactions on Software Engineering, vol.6, issue.3, pp.386-397, 1987.
DOI : 10.1142/5221

[. Merlin and D. Farber, Recoverability of Communication Protocols--Implications of a Theoretical Study, IEEE Transactions on Communications, vol.24, issue.9, pp.1036-1043, 1976.
DOI : 10.1109/TCOM.1976.1093424

]. S. Bibliographie-[-min93 and . Minato, Zero-suppressed bdds for set manipulation in combinatorial problems, 30th Conference on Design Automation, pp.272-277, 1993.

]. S. Min01 and . Minato, Zero-suppressed BDDs and their applications, MJ56] E.J. McCluskey Jr. Minimization of boolean functions. Bell System Technical Journal, pp.156-1701417, 1956.

J. A. Mcdermid, M. Nicholson, D. J. Pumfrey, and P. Fenelon, Experience with the application of HAZOP to computer-based systems, COMPASS '95 Proceedings of the Tenth Annual Conference on Computer Assurance Systems Integrity, Software Safety and Process Security', pp.37-48
DOI : 10.1109/CMPASS.1995.521885

[. Merle, J. Roussel, and J. Lesage, Algebraic determination of the structure function of Dynamic Fault Trees, Reliability Engineering & System Safety, vol.96, issue.2, pp.267-277, 2011.
DOI : 10.1016/j.ress.2010.10.001
URL : https://hal.archives-ouvertes.fr/hal-00536000

[. Merle, J. M. Roussel, J. J. Lesage, and A. Bobbio, Probabilistic Algebraic Analysis of Fault Trees With Priority Dynamic Gates and
URL : https://hal.archives-ouvertes.fr/hal-00480014

C. [. Moore and . Shannon, Reliable circuits using less reliable relays, Journal of the Franklin Institute, vol.262, issue.3, pp.191-208, 1956.
DOI : 10.1016/0016-0032(56)90559-2

[. Murchland, Fundamental concepts and relations for reliability analysis of multi-state systems. Reliability and Fault Tree Analysis, SIAM, 1975.

]. C. Pet66 and . Petri, Kommunikation mit Automaten, 1966.

]. J. Pet81, P. Peterson, I. Englewood, and . Cliffs, Petri net theory and the modeling of systems, NJ 07632, p.290, 1981.

B. Perrot, T. Prosvirnova, A. Rauzy, and J. , Sahut d'Izarn Arbres de défaillance dynamiques : une bibliothèque pour la nouvelle génération d'altarica, Actes du congrès LambdaMu'17 (actes électroniques ), 2010.

A. [. Point and . Rauzy, Altarica : constraint automata as a description language, Journal européen des systèmes automatisés, vol.33, issue.8-9, pp.1033-1052, 1999.

A. [. Prosvirnova and . Rauzy, Système de transitions gardées : formalisme pivot de modélisation pour la sûreté de fonctionnement, Actes du Congrès Lambda-Mu 18, 2012.

]. A. Rau01 and . Rauzy, Mathematical foundations of minimal cutsets, IEEE Transactions on Reliability, vol.50, issue.4, pp.389-396, 2001.

]. A. Rau02 and . Rauzy, Mode automata and their compilation into fault trees, Reliability Engineering and System Safety, vol.78, issue.1, pp.1-12, 2002.

]. A. Rau08 and . Rauzy, Guarded transition systems : a new states/events formalism for reliability studies Exact and truncated computations of prime implicants of coherent and non-coherent fault trees within Aralia, Journal of Risk and Reliability Reliability Engineering and System Safety, vol.222, issue.582, pp.495-505127, 1997.

]. D. Rei79 and . Reifer, Software failure modes and effects analysis. Reliability, IEEE Transactions on, vol.28, issue.3, pp.247-249, 1979.

J. [. Tang and . Dugan, Minimal cut set/Sequence generation for dynamic fault trees, Reliability and Maintainability, 2004 Annual Symposium- RAMS Los Angeles (USA), pp.207-213, 2004.

]. K. Tri01 and . Trivedi, Probability and statistics with reliability, queuing and computer science applications, 2001.

[. Vesely, N. Goldberg, and . Roberts, Fault Tree Handbook, volume NUREG-0492. Nuclear Regulatory Commission, 1981.

M. Stamatelatos, J. Dugan, J. Fragola, J. Minarick, I. et al., Fault tree handbook with Aerospace Applications version 1.1. NASA Office of Safety and Mission Assurance, 2002.

H. Watson, Launch control safety study. Bell labs, 1961.

L. [. Walker, Y. Bottaci, and . Papadopoulos, Compositional temporal fault tree analysis. Computer safety, reliability, and security, pp.106-119, 2007.

P. Weber, G. Medina-oliva, C. Simon, and B. Iung, Overview on Bayesian networks applications for dependability, risk analysis and maintenance areas, Engineering Applications of Artificial Intelligence, vol.25, issue.4, pp.671-682, 2012.
DOI : 10.1016/j.engappai.2010.06.002
URL : https://hal.archives-ouvertes.fr/hal-00546144

Y. [. Walker and . Papadopoulos, Pandora 2 : The time of priority-or gates

Y. [. Walker and . Papadopoulos, Qualitative temporal analysis: Towards a full implementation of the Fault Tree Handbook, Control Engineering Practice, vol.17, issue.10, pp.1115-1125, 2009.
DOI : 10.1016/j.conengprac.2008.10.003

N. [. Zang, K. S. Sun, and . Trivedi, A BDD-based algorithm for reliability analysis of phased-mission systems, IEEE Transactions on Reliability, vol.48, issue.1, pp.50-60, 1999.
DOI : 10.1109/24.765927