security requirements, researchers at the University of Trento and the University
of Sheffield (UK) have defined security extensions that enable Tropos to be
used for modeling both functional and nonfunctional security requirements
and designing security aspects for both security functionality and security