Security evaluation based on fault tree