TY - JOUR AU - Dejan Baca AU - Kai Petersen BT - Journal of Systems and Software M1 - 9 PB - Elsevier PY - 2013 SP - 2411 EP - 2428 T2 - Journal of Systems and Software TI - Countermeasure graphs for software security risk assessment: An action research VL - 86 ER -