Model-based Evaluation: from Dependability Theory to Security