A Generic Method for Protection Level Evaluation Under the Assumption of Two Simultaneous Faulty Measurements