Automated analysis of security-design models · Study