ITS4: A Static Vulnerability Scanner for C and C++ Code. - John Viega; J. T. Bloch; Y. Kohno; Gary McGraw (ACSAC, 2000)