[Ruthberg77] Ruthberg, Z. and McKenzie, R., eds. Audit and Evaluation of Computer Security, NBS Special Publication #500-19, October 1977. []