A Novel Security Metrics Taxonomy for R&D Organisations
A Methodology for Collecting Valid Software Engineering Data