A formal approach for the analysis of the security of socio-technical systems