A methodological approach to apply security tactics in software architecture design
misuse cases : use cases with hostile intent .