Yonghee Shin Laurie Williams Is complexity really the enemy of software security? 47-50 2008 QoP http://doi.acm.org/10.1145/1456362.1456372 conf/ccs/2008qop db/conf/ccs/qop2008.html#ShinW08