Extending fault trees with an AND-THEN gate | IEEE Conference Publication | IEEE Xplore