1. Blank, R.M., Gallagher, P.D.: NIST special publication 800-53 revision 4 - security and privacy controls for federal information systems and organizations. National Institute of Standards and Technology Special Publication, April 2013
2. Common attack pattern enumeration and classification. https://capec.mitre.org/
3. CWE view: Research concepts. https://cwe.mitre.org/data/definitions/1000.html
4. FAQ - what is the difference between a software vulnerability and software weakness? https://cwe.mitre.org/about/faq.html#A.2
5. Lecture Notes in Computer Science;M de Gramatica,2015