Jan Jürjens Model-Based Security Engineering. 2006 conf/secrypt/2006 SECRYPT db/conf/secrypt/secrypt2006.html#Jurjens06