Multiple-Fault Detection And Isolation Based On Disturbance Attenuation Theory