Can traditional fault prediction models be used for vulnerability prediction?

Published in: Empirical Software Engineering

Volume 18, Issue 1, pp. 25-59

DOI: 10.1007/s10664-011-9190-8