Specifying and analyzing early requirements in Tropos