[1] YUE C.Software security economics and threat modeling based on attack path analysis:a stakeholder value driven approach[DB/OL].[2007-10-01].http://sunset.usc.edu/case/TECHRPTS/phD_Dissertation.pdf.

[8] FENTON N,NEIL M.A critique of software defect prediction models[J].IEEE Transactions on Software Engineering,1999,25(5):675-689.