Assessing Information Security by Andrew Vladimirov & Konstantin Gavrilenko