Finding and fixing vulnerabilities in information systems the vulnerability assessment & mitigation methodology - Antβon, Philip S. (Rand, 2003)