An Ontology for Secure Socio-Technical Systems