An empirical study of dormant bugs
Searching for a Needle in a Haystack: Predicting Security Vulnerabilities for Windows Vista