A pragmatic method for integrated modeling of security attacks and countermeasures