Attack Surface and Defense-in-Depth Metrics