Architecting secure software systems. (2008)