Tor Stålhane Guttorm Sindre Safety Hazard Identification by Misuse Cases: Experimental Comparison of Text and Diagrams. 721-735 2008 MoDELS https://doi.org/10.1007/978-3-540-87875-9_50 conf/models/2008 db/conf/models/models2008.html#StalhaneS08