attack graph generation