CyberRank: Knowledge Elicitation for Risk Assessment of Database Security