Robustness in Model-Based Fault Diagnosis