Addressing challenges to quantitative security modeling