TY - RPRT TI - Why 2 times 2 ain't necessarily 4 - at least not in IT security risk assessment AU - Jens Braband PY - 2016 UR - https://arxiv.org/abs/1603.03710 ID - 1603.03710 ER -