1. ISO/IEC, I.: 21827 Information technology - Systems Security Engineering Capability Maturity Model (SSE-CMM)
2. ISO/IEC, I.: TR 15504-2,5:1998 Information technology - Software process assessment - Parts 2,5
3. ISO/IEC, I.: 15408-1,2,3:1999 Information technology - Security techniques - Evaluation criteria for IT security - Parts 1,2,3
4. Lecture Notes in Computer Science;B.-R. Cha,2005
5. Lecture Notes in Computer Science;H.-K. Kim,2004