When Security Meets Software Engineering: A Case of Modeling Secure Information Systems.