Risk analysis and security countermeasure selection. (©2010)