Misuse Cases + Assets + Security Goals
Using abuse case models for security requirements analysis