1. Managing information security risks: the OCTAVESM approach;Alberts,2002
2. Software security engineering: a guide for project managers;Allen,2008
3. Assessing information security risks in the software development life cycle, september;Ashbaugh,2006
4. On-demand service aims to cut cost of fixing software security flaws;Ashford,2009
5. Attack patterns articles;BSI,2013