We introduce the idea of a Design-Attack-Defend (DAD) model that determines the optimal defense plan for a critical infrastructure network within a specified budget constraint. Design-Attack-Defend first determines worst-case attacks and then determines where to defend or build additional infrastructure that will maximize the surviving efficiency of the infrastructure after a malicious attack or natural disaster.