1. A method comprising: receiving one or more cyber attack parameters, a cyber attack parameter describing a cyber attack scenario, the cyber attack parameters comprising at least one temporal parameter describing a temporal feature of the cyber attack scenario and a plurality of attack phases of the cyber attack scenario; performing the following for each cyber defense of one or more cyber defenses to yield one or more sets of cyber attack metrics: simulating the cyber attack scenario operating with a cyber defense, the simulation including: simulating a first attack phase of the cyber attack scenario against the cyber defense, and in response to the cyber attack overcoming the first cyber defense, simulating another of the plurality of attack phases of the cyber attack against the cyber defense; and determining a set of cyber attack metrics describing the cyber attack scenario operating with the cyber defense in each attack phase of the cyber attack scenario, the set of cyber attack metrics including a phase time metric that measures the amount of time the cyber attack spends in each attack phase of the plurality of attack phases of the cyber attack scenario with the cyber defense; and evaluating the one or more cyber defenses in accordance with the one or more sets of cyber attack metrics in each of the plurality of attack phases of the cyber attack scenario.