“NIST Information Technology Laboratory Software Diagnostics and Conformance Testing: Metrics and
Measures.”
Andy Ozment and Stuart E. Schechter (Massachusetts Institute of Technology), “Milk or Wine:
Does Software Security Improve with Age?”, in Proceedings of the 15th Usenix Security Symposium,