Blue versus Red: Towards a model of distributed security attacks