Estimating the Cost of Security for COTS Software. - Donald J. Reifer; Barry W. Boehm; Murali Gangadharan (ICCBSS, 2003)