Using Attack and Failure Propagation Analysis for Context-Aware Security Control Suggestions