@InProceedings{ Bashir:2008,
  author	= "M. Bashir and N. Christin",
  title		= "Three case studies in quantitative information risk
		  analysis",
  year		= 2008,
  month		= sep, 
  pages =       "77-86",
  booktitle =   "Proceedings of the CERT/SEI Making the Business Case for Software Assurance Workshop",
  address       = "Pittsburgh, PA"
}