Automated security testing framework