Security attack analysis using attack patterns
Guidelines for conducting and reporting case study research in software engineering