Mengquan Lin, Qiangmin Wang, Jianhua Li: Methodology of Quantitative Risk Assessment for Information System Security. CIS (2) 2005: 526-531