Text this: System security assessment based on knowledge base