Security vulnerabilities in software systems: A quantitative perspective
Two case studies of open source software development: Apache and Mozilla