The Need for a Data-Driven Approach to Security Orchestration