Enterprise management and software risk prediction based on security metrics - Chatzipoulidis, Aristeidis (2015)