Stav dette: Risk propagation assessment for network security