The Simplex Reference Model: Limiting Fault-Propagation Due to Unreliable Components in Cyber-Physical System Architectures | IEEE Conference Publication | IEEE Xplore