125 Pratsuya Manadhata and Jeannette M. Wing (CMU), An Attack Surface Metric (Pittsburgh, PA: CMU,
July 2005).
126 O.H. Alhazmi, Y. K. Malaiya, and I. Ray (Colorado State University), “Security Vulnerabilities in Software
Systems: a Quantitative Perspective,” in Proceedings of the IFIP WG 11.3 Working Conference on Data