Paper: An Approach to Incorporating Uncertainty in Network Security Analysis