Faily, Shamal, "Engaging stakeholders during late stage security design with assumption personas.", Information and computer security, 2015