Modelling critical infrastructure dependency relationships