The Duality of Information Security Management: Fighting Against Predictable and Unpredictable Threat Publication Type: Journal Article Authors: Paolo Spagnoletti and Andrea Resca Source: Journal of Information Systems Security (2008)