Audun Jøsang Bander AlFayyadh Tyrone Grandison Mohammed Al Zomai Judith McNamara Security Usability Principles for Vulnerability Analysis and Risk Assessment. 269-278 2007 ACSAC http://doi.ieeecomputersociety.org/10.1109/ACSAC.2007.40 conf/acsac/2007 db/conf/acsac/acsac2007.html#JosangAGAM07