Towards Resource-Aware Security Testing of Software