Lam-for Kwok Dennis Longley Security Modelling for Risk Analysis. 29-46 2004 conf/sec/2004 SEC db/conf/sec/sec2004.html#KwokL04