Engineering
Defenses
Failure model