Risk Modeling and Cyber Defense Exercise for Critical Infrastructures Security