Measuring network security using Bayesian Network-based attack graphs