Faily, Shamal, "Engaging stakeholders in security design: an assumption-driven approach.", , 2014