A framework for evaluating deployed security systems : is there a chink in your ARMOR?