Can traditional fault prediction models be used for vulnerability prediction?
Measuring, analyzing and predicting security vulnerabilities in software systems