Hazard Analysis for Security Protocol Requirements. - Nathalie Foster; Jeremy Jacob (Network Security, 2001)