selected publications conference paper Indicator-based architecture-level security evaluation in a service-oriented environment. . 2010