Using security metrics coupled with predictive modeling and simulation to assess security processes | IEEE Conference Publication | IEEE Xplore