Risk Tolerance Approach to Network Boundary Defense