Morrison, P., Pandita, R., Xiao, X., Chillarege, R., & Williams, L. (2017). Are vulnerabilities discovered and resolved like other defects?. Empirical Software Engineering.
