Quantifying the Security Effectiveness of Firewalls and DMZs