RSA 2014: Non-Disruptive Vulnerability Discovery, Without Scanning Your Network
Being Explicit About Weaknesses Robert A. Martin - MITRE Sean Barnum - Cigital Steve Christey - MITRE 1 March 2007.
Measuring and Managing Software Security Robert A. Martin 20 March 2013 © 2012 The MITRE Corporation. All rights reserved.
A Progress Report on the CVE Initiative Robert Martin Steven Christey David Baker The MITRE Corporation June 27, 2002.