On the capability of static code analysis to detect security vulnerabilities. - Katerina Goseva-Popstojanova; Andrei Perhinschi (Inf. Softw. Technol., 2015)