On lightweight mobile phone application certification
Applying a security requirements engineering process