A risk driven process model for the development of trusted systems. - Ann B. Marmor-Squires; John McHugh; Martha A. Branstad; Bonnie P. Danner; Lou Nagy; Pat Rougeau; Daniel F. Sterne (ACSAC, 1989)