Safety Analysis and Evaluation of an Air Traffic Control Computing System