•Saltzer
& Schroeder, IEEE, 1975
•Adams
& Sasse, CACM, 1999
•Whitten
& Tygar, USENIX, 1999
“Why Johnny Can’t
Encrypt”
•Gene
Spafford, Purdue Univ
• Center for
Education and Research Information
and Assurance and
Security
•Ka-Ping
Yee, UC-Berkeley, 2002