Using model-based security analysis in component-oriented system development