Peter G. Neumann Where to Place Trust. 138 1992 35 Commun. ACM 10 db/journals/cacm/cacm35.html#Neumann92g http://doi.acm.org/10.1145/135239.135249