1. Campbell, K., Gordon, L. A., Loeb, M. P., Zhou, L. (2003). The Economic Cost of Publicly Announced Information Security Breaches: Empirical Evidence from the Stock Market, Journal of Computer Security, Vol. 11, issue 3.
2. Cavusoglu, H., Mishra B., Raghunthan S. (Feb. 2002). The Effect of Internet Security Breach Announcements on Market Value of Breached Firms and Internet Security Developers, The University of Texas at Dallas.
3. Farahmand, F., Navathe, S. B., Sharp, G. B, Enslow, P. H. (2004). A Management Perspective on Risk of Security Threats to Information Systems. To appear in the Journal of Information Technology & Management.
4. Farahmand, F., Navathe, S. B., Sharp, G. B., Enslow, P. H. (2003). Managing Vulnerabilities of Information Systems to Security Incidents”, 5th International Conference on Electronic Commerce, ICEC 2003, ACM, Pittsburgh, PA, Sept. 30–Oct. 3, pp. 348–354.
5. ISO. (1989). Information Processing Systems-Open Systems Interconnection-Basic Reference Model, Part 2: Security Architecture, ISO 7498-2