In one embodiment, the criticality ranking of a threat indicates the overall severity of the threat, and combines factors such as whether individuals, groups, or automated processes are actively purveying the threat (such as when an individual is intentionally trying to infect the Internet with a worm), the level of damage that the threat will cause to affected assets, an estimate of the number of