Theodosis Dimitrakos Dimitris Raptis Brian Ritchie Ketil Stølen Model Based Security Risk Analysis for Web Applications. 2002 conf/euroweb/2002 EuroWeb http://ewic.bcs.org/conferences/2002/euroweb/session2/paper1.htm db/conf/euroweb/euroweb2002.html#DimitrakosRRS02