VCCFinder: Finding Potential Vulnerabilities in Open-Source Projects to Assist Code Audits
Searching for a Needle in a Haystack: Predicting Security Vulnerabilities for Windows Vista