Empirical Research for Software Security : Foundations and Experience - Lotfi ben Othmane; Martin Gilje Jaatun; Edgar Weippl (2018)