Architectural Modeling to Verify Security and Nonfunctional Behavior. - Jörgen Hansson; Lutz Wrage; Peter H. Feiler; John Morley; Bruce A. Lewis; Jérôme Hugues (IEEE Secur. Priv., 2010)