Foundations of Security Analysis and Design VI: FOSAD