Challenges in Protecting Critical Infrastructure against Cyber Threats