Text this: Network security equipment evaluation based on attack tree with risk fusion