A security framework for the analysis and design of software attestation