Can complexity, coupling, and cohesion metrics be used as early indicators of vulnerabilities?

Istehad Chowdhury, Mohammad Zulkernine. Can complexity, coupling, and cohesion metrics be used as early indicators of vulnerabilities?. In Sung Y. Shin, Sascha Ossowski, Michael Schumacher, Mathew J. Palakal, Chih-Cheng Hung, editors, Proceedings of the 2010 ACM Symposium on Applied Computing (SAC), Sierre, Switzerland, March 22-26, 2010. pages 1963-1969, ACM, 2010. [doi]

@inproceedings{ChowdhuryZ10,
  title = {Can complexity, coupling, and cohesion metrics be used as early indicators of vulnerabilities?},
  author = {Istehad Chowdhury and Mohammad Zulkernine},
  year = {2010},
  doi = {10.1145/1774088.1774504},
  url = {http://doi.acm.org/10.1145/1774088.1774504},
  researchr = {https://researchr.org/publication/ChowdhuryZ10},
  cites = {0},
  citedby = {0},
  pages = {1963-1969},
  booktitle = {Proceedings of the 2010 ACM Symposium on Applied Computing (SAC), Sierre, Switzerland, March 22-26, 2010},
  editor = {Sung Y. Shin and Sascha Ossowski and Michael Schumacher and Mathew J. Palakal and Chih-Cheng Hung},
  publisher = {ACM},
  isbn = {978-1-60558-639-7},
}