A methodological approach to apply security tactics in software architecture design
Eliciting security requirements with misuse cases