Stateful Design for Secure Information Systems In Proceedings of the 3rd International Workshop on Security in Information Systems - Volume 0ICEIS, 277-286, 2005 , Miami, United States