A generic overall framework for network security evaluation