Meadows, C.A., "Tradeoff Areas in Secure System Development",
Proceedings of CSESAW '94, Naval Surface Warfare Center,
July 1994.

<blockquote>
In this paper we identify several areas in which the satisfaction of
security requirements can affect the cost and performance of a system,
and describe what is known about tradeoffs in these areas. The areas
we investigate include both features offered by the system and the
procedures that are involved in building the system.
</blockquote>