Steven B. Lipner Assurance and evaluation: what next? 1 2007 ACM Conference on Computer and Communications Security http://doi.acm.org/10.1145/1315245.1315246 conf/ccs/2007 db/conf/ccs/ccs2007.html#Lipner07