Semi-automated generation of networked vulnerability-attack countermeasure trees for security analysis