Variability meets Security: Quantitative security modeling and analysis of highly customizable attack scenarios