Stuart E. Schechter How to Buy Better Testing. 73-87 2002 conf/infrasec/2002 InfraSec http://link.springer.de/link/service/series/0558/bibs/2437/24370073.htm db/conf/infrasec/infrasec2002.html#Schechter02