Gunnar Peterson The economics of finding and fixing vulnerabilities in distributed systems. 1-2 2008 QoP http://doi.acm.org/10.1145/1456362.1456363 conf/ccs/2008qop db/conf/ccs/qop2008.html#Peterson08