[Brand80] Brand, S. L. An Approach to Identification and Audit of vulnerabilities and Control in Application Systems, Audit and Evaluation of Computer Security II: System Vulnerabilities and Controls, Z. Ruthberg, ed., NBS Special Publication #500-57, MD7 8733, April 1980. []