1. The Security Development Lifecycle (SDL): A Process for Developing Demonstrably More Secure Software;Howard,2006
2. OWASP, Comprehensive, lightweight application security process, http://www.owasp.org, 2006.
3. Software Security: Building Security;McGraw,2006
4. MSDN: Security development lifecycle phases, http://msdn2.microsoft.com/en-us/library/ms995349.aspx, 2005.
5. Information technology security techniques evaluation criteria for it security, standard ISO/IEC 15408 (2005).