1. American Petroleum Institute: Security vulnerability assessment methodology for the petroleum and petrochemical industries, second edition (2004). http://www.npradc. org/docs/publications/newsletters/SVA_2nd_Edition.pdf
2. Anderson, R.: Security economics resource page (2010). http://www.cl.cam.ac.uk/~rja14/econsec.html
3. Anderson, R.: Security Engineering – A Guide to Building Dependable Distributed Systems. Wiley (2008)
4. Anderson, R.: Security Engineering – A Guide to Building Dependable Distributed Systems, chapter 26. Wiley (2008)
5. Anderson, R.:Why information security is hard – an economic perspective. In: Proceedings of the 17th Annual Computer Security Applications Conference (ACSAC), pp. 358–365. (2001)