Charles B. Haley Robin C. Laney Jonathan D. Moffett Bashar Nuseibeh Using trust assumptions with security requirements. 138-151 2006 11 Requir. Eng. 2 http://dx.doi.org/10.1007/s00766-005-0023-4 db/journals/re/re11.html#HaleyLMN06