John Viega Building security requirements with CLASP. 1-7 2005 30 ACM SIGSOFT Software Engineering Notes 4 http://doi.acm.org/10.1145/1082983.1083207 db/journals/sigsoft/sigsoft30.html#Viega05