An Ontology-based Framework for Modelling Security Requirements In Proceedings of the 6th International Workshop on Security in Information Systems - Volume 0ICEIS, 78-88, 2008 , Barcelona, Spain