190 Bruce Schneier, “Attack Trees,” Dr. Dobbs Journal (December 1999).
Software Security Assurance State-of-the-Art Report (SOAR) 217
Section 5 SDLC Processes and Methods and the Security of Software
191 “Common Vulnerability Scoring System Special Interest Group” [web page] (Mountain View, CA: Forum