Designing Solutions to InfoSec Problems