Capability engineering for development of security systems