There are two products from the previous phase, In this phase, they will be used as initial
values to evaluate the mean of overall risk. There are only 3 steps in this phase. Remind that the number of active hosts detected form each detection tools may not equal. Thus, it is not fair if we just add them together and divide by 2. Hence, the first step of this phase is to find the “Probability of Trust” which related toratio of detected servers and clients. The simple equation for “Probability of trust”, Pi(T), is as follows: