%0 Journal Article %B Journal of Systems and Software %D 2013 %I Elsevier %P 2411-2428 %T Countermeasure graphs for software security risk assessment: An action research %V 86