Improving information security risk analysis by including threat-occurrence predictive models. - Pedro Tubío Figueira; Cristina López-Bravo; José Luis Rivas López (Comput. Secur., 2020)