Susceptibility matrix: a new aid to software auditing
K. Jiwnani, Marvin V. Zelkowitz · IEEE Security & Privacy · 2004
Testing for security is lengthy, complex, and costly, so focusing test efforts in areas that have the greatest number of security vulnerabilities is essential. This article describes a taxonomy-based approach that gives an insight into the distribution of vulnerabilities in a system.