https://9lib.co/document/z1d5ogp3-the-optimal-investment-strategy-of-information-security.html