Mikko T. Siponen, Juhani Heikka: Do secure information system design methods provide adequate modeling support? Inf. Softw. Technol. 50(9-10): 1035-1053 (2008)