Author: Conference on Computer Assurance. (8th 1993 National Institute of Standards and Technology)