Zhendong Ma, Paul Smith: Determining Risks from Advanced Multi-step Attacks to Critical Information Infrastructures. CRITIS 2013: 142-154