Ahto Buldas Peeter Laud Jaan Priisalu Märt Saarepera Jan Willemson Rational Choice of Security Measures Via Multi-parameter Attack Trees. 235-248 2006 conf/critis/2006 CRITIS http://dx.doi.org/10.1007/11962977_19 db/conf/critis/critis2006.html#BuldasLPSW06