David M. Nicol William H. Sanders Kishor S. Trivedi Model-Based Evaluation: From Dependability to Security. 48-65 2004 1 IEEE Trans. Dependable Sec. Comput. 1 http://doi.ieeecomputersociety.org/10.1109/TDSC.2004.11 db/journals/tdsc/tdsc1.html#NicolST04