The rapid propagation of Internet into nearly every aspect of our daily life, together with the increase in volume and sophistication of network attacks, puts a special emphasis on the security of network systems. Currently, security modeling and simulation is one of the widely acknowledged methods for network security evaluation. However, in spite of its fundamental role, the information and communication security domain still lacks the sound and comprehensive tools for assessment of network system state.