Steven B. Lipner Twenty Years of Evaluation Criteria and Commercial Technology. 111-112 1999 IEEE Symposium on Security and Privacy http://computer.org/conferen/proceed/s%26p/0176/01760111abs.htm db/conf/sp/sp1999.html#Lipner99