Towards Automated Network Mitigation Analysis (extended)