Title: International Journal of Secure Software Engineering