Quantifying the Attack Surface of a Web Application. - Thomas Heumann; Sven Türpe; Jörg Keller 001 (Sicherheit, 2010)