A Natural Extension of Tropos Methodology for Modelling Security