Describir: Security Evaluation supported by Information Security Mechanisms