An empirical model to predict security vulnerabilities using code complexity metrics
Software Engineering Economics