Using knowledge-based systems for computer security analysis