Author: Conference on Computer Assurance. (10th 1995 National Institute of Standards and Technology)