1. Misuse cases: use cases with hostile intent;Alexander;IEEE Software,2003
2. Improving software security with static automated code analysis in an industry setting;Baca;Software: Practice and Experience,2013
3. Countermeasure graphs for software security risk assessment: an action research;Baca;Journal of Systems and Software,2013
4. The goal question metric approach;Basili;Encyclopedia of Software Engineering,1994
5. Defense trees for economic evaluation of security investments;Bistarelli,2006