https://marcoramilli.com/2012/04/11/a-design-methodology-for-computer-security-testing/