Attack graph generation and analysis