1. White paper entitled "Internet Application Security" by Eran Reshef, Perfecto Technologies, 1999 , first published on http://securityfocus.com .
2. IATF Release 3.1, "Defend the Computing Environment," Chapter 7 , Section 7.1.1 .