1. Security meter-a practical decision tree model to quantify risk;Sahinoglu;IEEE Security and Privacy,2005
2. Forni , E. 2002 Certification and Accreditation http://www.dsdlabs.com/security.htm
3. Capabilities-Based Attack Tree Analysis http://www.attacktrees.com