An approach for formal analysis of the security of a water treatment testbed