Security and privacy requirements analysis within a social setting