A Quantitative Framework for Cyber Moving Target Defenses