1SSE-CMM Project. Systems Sccurity Engineering Capability Maturity Model, Model Description (VI. I ). 1997-06-16.
2Department of Defennse Computer Security Center.Trusted Computer System Evaluation Critcria.DoD 5200,28-STD,1 995.
3黄月江.信息安全与保密[M].北京：国防工业出版社,2001..
4arrahrants WM, Ellis AW. CERTS: A Comparative Evaluation Method for Risk Management Methodologies and Tools[C].In: Proceedings of the Sixth Annual Computer Security Applications Conference, 1990.
