Sangkyun Kim, Hong Joo Lee: Cost-Benefit Analysis of Security Investments: Methodology and Case Study. ICCSA (3) 2005: 1239-1248