A modular approach to computer security risk management. - Robert P. Campbell; Gerald A. Sands (MARK, 1979)