Theory and Models for Cyber Situation Awareness