Assessing Your Security Before Bad Guys Do