A methodological approach to apply security tactics in software architecture design
Security Requirements Engineering: A Framework for Representation and Analysis