Dejan Baca Bengt Carlsson Lars Lundberg Evaluating the cost reduction of static code analysis for software security. 79-88 2008 PLAS http://doi.acm.org/10.1145/1375696.1375707 conf/pldi/2008plas db/conf/pldi/plas2008.html#BacaCL08