and metrics, in empirical software engineering. Quality of Protection: Security