Security and Privacy Assurance Research (SPAR) testing and assessment framework