The Art of Network Vulnerability Assessment