William M. Garrabrants, Alfred W. Ellis III, Lance J. Hoffman, Magdi N. Kamel. CERTS: a comparative evaluation method for risk management methodologies and tools. In Sixth Annual Computer Security Applications Conference, ACSAC 1990, 3-7 December, 1990, Tucson, Arizona, USA. pages 251-257, IEEE, 1990. [doi]