Vulnerability assessment of drinking water treatment plants