Abstract: In large infrastructure systems, the technical and operational requirements that are necessary to face future unexpected events cannot be defined up front; on the contrary, they evolve as a result of internal or external ...