Assessing the impact of vulnerability modeling in the protection of critical infrastructure