Robust models and evaluation for systems security research