Designing a Methodological Framework for the Empirical Evaluation of Self-Protecting Systems