B.: Security requirements engineering: A framework for representation and analysis (2008)

by C B Haley, C R Laney, D J Moffett, Nuseibeh
Venue:IEEE Transactions on Software Engineering