A distributed security tomography framework to assess the exposure of ICT infrastructures to network threats