Risk Propagation Assessment For Network Security