Text this: Fuzzy description of security requirements for intrusion tolerant web-services