Attack Path Modeling: Giving the Good Guys the Advantage