A model-driven process for physical protection system design and vulnerability evaluation