An Attack Surface Metric
an empirical study of operating system errors .