Eliciting security requirements and tracing them to design: an integration of Common Criteria, heuristics, and UMLsec. - Houmb, Siv Hilde; Islam, Shareeful; Knauss, Eric; Jürjens, Jan; Schneider, Kurt (Requirements Engineering, 2010)