@misc{35881,
  author = {Murugiah Souppaya and Karen Scarfone},
  title = {Technical Guide to Information Security Testing and Assessment},
  year = {2008},
  month = {2008-09-30},
  publisher = {Special Publication (NIST SP), National Institute of Standards and Technology, Gaithersburg, MD},
  url = {https://tsapps.nist.gov/publication/get_pdf.cfm?pub_id=152164},
  language = {en},
}