Generating complete set of courses of action based on automated planning and its application in system-of-systems vulnerability analysis