3 P. Giorgini G. Manson H. Mouratidis I. Philp 2002 A Natural Extension of Tropos Methodology for Modelling Security. Workshop on Agent-oriented methodologies, at OOPSLA 2002 pub