Romulus: A Computer Security Properties Modeling Environment, the Theory of Security