Evaluating the Combined Effect of Vulnerabilities and Faults on Large Distributed Systems