Security Games with Protection Externalities