Attack countermeasure trees (ACT): towards unifying the constructs of attack and defense trees
Model-based evaluation: from dependability to security