Mikko T. Siponen: New Directions on IS Security Methods. SEC 2003: 325-336