Combining Misuse Cases with Attack Trees and Security Activity Models
Specifying reusable security requirements