Jeffrey A. Vaughan Limin Jia Karl Mazurak Steve Zdancewic Evidence-Based Audit. 177-191 2008 CSF http://doi.ieeecomputersociety.org/10.1109/CSF.2008.24 conf/csfw/2008 db/conf/csfw/csf2008.html#VaughanJMZ08