Designing Security Defenses For Cyber-Physical Systems