Measuring and Improving Cyber Defense Using the MITRE ATT&CK Framework