Combining Misuse Cases with Attack Trees and Security Activity Models
Eliciting security requirements with misuse cases