Web application penetration test plan and design tool for complex transportation systems