Comparing Electronic Battlefields: Using Mean Time-to-Compromise as a Comparative Security Metric