Security metrics for source code structures
Towards Operational Measures of Computer Security