Data Driven Security Models and Analysis