Formalizing information security knowledge
Information systems security design methods: implications for information systems development