Optimisation of Security System Design by Quantitative Risk Assessment and Genetic Algorithms