Managing Information Risk and the Economics of Security - Schmidt, Wolfgang M.; Johnson, M. Eric (Springer US, 2009)