Cyber-Physical Systems Security: A Control-Theoretic Approach