Johnson, Eric M. (2008) Managing Information Risk and the Economics of Security
Jump to Annotated Bibliography