Modeling User Behavior for Cyber Security with Formal Methods and Agent based Simulation