A goal oriented approach for modeling and analyzing security trade-offs. Proc - Elahi, G; Yu, E (26th International Conference on Conceptual Modeling)