A framework towards the efficient identification and modeling of security requirements