How good is a security policy against real breaches?: a HIPAA case study. - Özgür Kafali; Jasmine Jones; Megan Petruso; Laurie A. Williams; Munindar P. Singh (ICSE, 2017)