7ISO/IEC.ISO/IEC 17799:2005 Information Technology-security Techniques-code of Practice for Information Security Management[S].www.iso.org,2005.
8ALBERTS C J,BEHRENS S G,PETHIA R D.Operationally critical threat,asset,and vulnerability evaluationSM[EB/OL].[2004-01-18].http://www.cert.org/octave/.