This book constitutes the proceedings of the 4th International Workshop on Critical Information Infrastructures Security, CRITIS 2009, held in Bonn, Germany, during September 30 to October 2, 2009.