An Ontology for Secure Socio-Technical Systems 1