Measuring the Risk-Based Value of IT Security Solutions. - Ashish Arora; Dennis Hall; C. Ariel Pinto; Dwayne Ramsey; Rahul Telang (IT Prof., 2004)