183 Charles B. Haley, Robin C. Laney, and Bashar Nuseibeh (The Open University), “Deriving Security
Requirements From Crosscutting Threat Descriptions,” in Proceedings of the Third International
Conference on Aspect-Oriented Software Development, Lancaster, UK, March 22–26, 2004: 112–121.
184 John Wilander and Jens Gustavsson (Linköpings University), “Security Requirements: a Field Study of