A Risk-Based Methodology and Tool Combining Threat Analysis and Power System Security Assessment