Security Analysis of System Behaviour - From "Security by Design" to "Security at Runtime" -