A Human-Agent-Focused Approach to Security Modeling