agile software development authentication bell-lapadula model ctcpec computer security database department of trade and industry digital signature evaluation assurance level france germany itsec international electrotechnical commission international organization for standardization international standard microsoft national institute of standards and technology national security agency national voluntary laboratory accreditation program netherlands operating system protection profile quality assurance rainbow series security target smart card standards council of canada united states department of defense usability testing verification and validation waterfall model william jackson windows xp