A stochastic model for evaluating the vulnerability of a supply network