Empirical research for software security : foundations and experience - ben Othmane, Lotfi,; Jaatun, Martin Gilje,; Weippl, Edgar, (Series in security, privacy, and trust., 2018)