Modeling dependencies in security risk management | IEEE Conference Publication | IEEE Xplore