John Viega J. T. Bloch Tadayoshi Kohno Gary McGraw Token-based scanning of source code for security problems. 238-261 2002 5 ACM Trans. Inf. Syst. Secur. 3 http://doi.acm.org/10.1145/545186.545188 db/journals/tissec/tissec5.html#ViegaBKM02