Pragmatic Security Metrics by Gary Hinson & W. Krag Brotby