Context-based attack tree modelling for software development