Open source vs. closed source software: towards measuring security. - Guido Schryen; Rouven Kadura (SAC, 2009)