Risk analysis and security countermeasure selection - Norman, Thomas L. (CRC Taylor & Francis Group, 2010)