Survivability Architecture of a Mission Critical System: The DPASA Example