C. R. Ramakrishnan R. C. Sekar Model-Based Analysis of Configuration Vulnerabilities. 189-209 2002 10 Journal of Computer Security 1/2 db/journals/jcs/jcs10.html#RamakrishnanS02