Renaud De Landtsheer Axel van Lamsweerde Reasoning about confidentiality at requirements engineering time. 41-49 2005 conf/sigsoft/2005 ESEC/SIGSOFT FSE http://doi.acm.org/10.1145/1081706.1081715 db/conf/sigsoft/fse2005.html#LandtsheerL05