Model Checking the Security of Multi-Protocol Systems