A Practical Security Risk Analysis Process and Tool for Information System. - YoonJung Chung; InJung Kim 003; DoHoon Lee (J. Inf. Process. Syst., 2006)