Apparatus and method for assessing the vulnerability of network security