Towards a unifying security framework for cyber-physical systems