A Practical Model for Rating Software Security. - Haiyun Xu; Jeroen Heijmans; Joost Visser 001 (SERE (Companion), 2013)