Threat Modeling for Security Failure-Tolerant Requirements. - Michael E. Shin; Swetha Dorbala; Dongsoo Jang (SocialCom, 2013)