Security Attack Testing (SAT) - testing the security of information systems at design time