An Ontology for Modelling Security: The Tropos Approach