Risk Analysis and Security Countermeasure Selection