Model-Driven Risk Analysis by Doris Lund, Mass Soldal Lund & Ketil Stolen