Dimitris Gritzalis Maria Karyda Lazaros Gymnopoulos Elaborating Quantitative Approaches for IT Security Evaluation. 67-78 2002 conf/sec/2002 SEC db/conf/sec/sec2002.html#GritzalisKG02