Risk analysis and security countermeasure selection. (2015)