A framework and theory for cyber security assessments
Validating and Restoring Defense in Depth Using Attack Graphs