system robustness