Evidence-Based Cybersecurity: Data-Driven And Abstract Models