Are safety-critical systems really survivable to attacks?