On synergies of cyber and physical security modelling in vulnerability assessment of railway systems