Executable misuse cases for modeling security concerns