George Cybenko Why Johnny Can't Evaluate Security Risk. 5 2006 4 IEEE Security & Privacy 1 http://doi.ieeecomputersociety.org/10.1109/MSP.2006.30 db/journals/ieeesp/ieeesp4.html#Cybenko06