Automating Security Verification