A Service-Oriented Framework for Quantitative Security Analysis of Software Architectures