The simulated security assessment ecosystem: Does penetration testing need standardisation? - William Knowles; Alistair Baron; Tim McGarr (Comput. Secur., 2016)