1. Yonghee Shin, Laurie Williams: An empirical model to predict security vulnerabilities using code complexity metrics. ESEM 2008: 315--317
2. T. Menzies, J. Greenwald, and A. Frank. 2007. Data mining static code attributes to learn defect predictors. IEEE Trans. Softw. Eng., vol. 33, no. 1, pp. 2--13, Jan. 2007.
3. S. Lessmann, B. Baesens, C. Mues, and S. Pietsch. 2008. Benchmarking classification models for software defect prediction: a proposed framework and novel findings. IEEE Trans. Softw. Eng., vol. 34, no. 4, pp. 485--496, Jul./Aug. 2008.
4. T. Menzies, Z. Milton, B. Turhan, B. Cukic, Y. Jiang, and A. Bener. 2010. Defect prediction from static code features: current results, limitations, new approaches. Automated Software. Eng., vol. 17, no. 4, pp. 375--407, 2010.
5. N. Nagappan, T. Ball, and B. Murphy. 2006. Using historical in-process and product metrics for early estimation of software failures. In Proc. Int. Symp. Softw. Rel. Eng., 2006, pp. 62--74.