Extracting ICS models from malware via concolic analysis