Security metrics for source code structures. - Istehad Chowdhury; Brian Chan; Mohammad Zulkernine (SESS, 2008)

Understanding the rationale for updating a function's comment. - Haroon Malik; Istehad Chowdhury; Hsiao-Ming Tsou; Zhen Ming Jiang; Ahmed E. Hassan (ICSM, 2008)

Can complexity, coupling, and cohesion metrics be used as early indicators of vulnerabilities? - Istehad Chowdhury; Mohammad Zulkernine (SAC, 2010)

Using complexity, coupling, and cohesion metrics as early indicators of vulnerabilities. - Istehad Chowdhury; Mohammad Zulkernine (J. Syst. Archit., 2011)