1. Methods for measuring the level of computer security;Nugent,1985
2. Authentication metric analysis and design;Reiter;ACM Transactions on Information and System Security,1999
3. Approaches to security metrics, “in CSS-PAB Workshop on”;Nielsen,2000
4. Balanced scorecard implementation;Andersen,2001
5. Security metrics guide for information technology systems;Swanson,2003