Managing Information Risk and the Economics of Security - Johnson, M. Eric (Springer US : Imprint: Springer, 2009)