Diversity as a defense strategy in information systems. Does evidence from previous events support such an approach?.