How to Manage Failures in Air Traffic Control Software Systems 1. Introduction