Describir: Risk propagation assessment for network security