1. Axelsson, S., “The Base-Rate Fallacy and the Difficulty of Intrusion Detection,” ACM Transactions on Information and System Security, 3(3), August 2000.
2. Berinato, S. “Finally, A Return on Security Spending,” CIO Magazine, Feb 15, 2002.
3. Brynjolfsson, E., “The Productivity Paradox of Information Technology,” Communications of the ACM, 36(12), pp. 66–77, 1993.
4. Cagnemi, M. P., “Top Technology Issues,” Information Systems Control Journal, 4(6), 2001.
5. Cavusoglu, H., B. K. Mishra and Raghunathan, S., “Assessing the Value of Detective Control in IT Security,” Proceedings of 8th Americas Conference on Information Systems, pp. 1910–1918, 2002a.