https://123dok.net/document/z1d36njd-formal-analysis-of-security-metrics-and-risk.html