John Heaps, Rocky Slavin, Xiaoyin Wang: Toward A Code Pattern Based Vulnerability Measurement Model. SACMAT 2018: 209-211