Landwehr, C. E., A. R. Bull, J. P. McDermott, and W. S. Choi, "A Taxonomy of Computer Program Security Flaws, with Examples," ACM Computing Surveys, Vol. 26, No. 3 (Sept. 1994), pp. 211-254. PostScript [Earlier version published as NRL Formal Report 9591]