An Approach for Guiding Developers in the Choice of Security Solutions and in the Generation of Concrete Test Cases