Cyber security for critical infrastructures

Simulations identify risks and cascading effects early on.

April, 2026. Cyberattacks are increasingly targeting critical infrastructure such as energy, water, and utility systems. Between April and December 2025, there were 264 reported attacks in Germany alone. The growing complexity of these attacks necessitates a close integration of Cyber Threat Intelligence (CTI) and Business Continuity Management (BCM). Threats must be assessed, decisions supported, and business processes secured in the event of a crisis

This is exactly where “DYNAMO” comes in. The EU-funded project (GA 101069601) combines threat analysis, decision support, and the protection of critical functions. At the same time, it strengthens the structured exchange of threat information across sectors.

The project, involving 15 partners—including three endusers— ran from October 2022 to December 2025. Fraunhofer EMI used stochastic simulations to analyze failures in hospitals, energy, and maritime systems. The goal was to visualize cascading effects and quantify operational consequences using the institute’s proprietary software “CaESAR.” In addition, we developed a methodology that systematically collects cybersecurity-relevant information (CTI) for critical infrastructures.

These tools make resilience measurable. They integrate simulations with BCM and CTI and translate technical disruptions into operational impacts. Investments can be prioritized. Emergency plans can be evaluated based on data, and risks can be assessed across sectors.

Future work aims to make the simulations even more precise, expand sector-specific models, and refine algorithms for the study of the propagation of impacts. This will enable even more reliable forecasting of risks in complex critical infrastructure environments in the future.