Worst-Case Analysis Of Space Systems