Security evaluation for industrial control devices