Mining SQL injection and cross site scripting vulnerabilities using hybrid program analysis
Evaluating Complexity, Code Churn, and Developer Activity Metrics as Indicators of Software Vulnerabilities