Systematization of Knowledge from Intrusion Detection Models Attack Surface and Defense-in-Depth Metrics Predicting the Difficulty of Compromise through How Attackers Discover Vulnerabilities