Designing Fault Injection Experiments Using State-Based Model to Test a Space Software