A Domain-agnostic Framework for Secure Design and Validation of CPS Systems