A common criteria framework for the evaluation of information technology systems security. - R. Kruger; Jan H. P. Eloff (SEC, 1997)