Mal-Activity Diagrams for Capturing Attacks on Business Processes · Study