Discovering vulnerabilities using data-flow analysis and machine learning Demonstrated for PHP applications
Evaluating Complexity, Code Churn, and Developer Activity Metrics as Indicators of Software Vulnerabilities