Security risk models for cyber insurance. (2020)