The Myths and Facts behind Cyber Security Risks for Industrial Control Systems