Optimizing Investments in Security Countermeasures: A Practical Tool for Fixed Budgets, by Jonathan Caulkins and Nancy R. Mead, September/October 2007 edition of IEEE Security and Privacy Magazine. “In the article, the team presents a tool and methodology they developed for software engineers and their clients to help them make security decisions when resources are limited.”