Performance Evaluation and Optimization of Fraud Detection Systems.
This paper explains how to measure detection performance objectively,
and construct the receiver operation characteristic curve (ROC) for a system.
The formulation of the cost-benefit function is then optimized based on the
ROC.
Role-Based Access Control in the HTTP Environment. This paper describes a fielded implementation of RBAC and session management for web-based systems, well before any vendor supported this functionality.