Risk-Based Attack Surface Approximation: How Much Data Is Enough?
Evaluating Complexity, Code Churn, and Developer Activity Metrics as Indicators of Software Vulnerabilities