Text this: Risk assessment method for network attack surface based on Bayesian attack graph