Author: Conference on Computer Assurance. (9th 1994 National Institute of Standards and Technology)