network vulnerability assessment services security risk architecture design