Avionics System Design: How to Prevent Incidents from PEDS