Drupal-Bibcite17<style face="normal" font="default" size="100%">A hierarchical model for quantifying software security based on static analysis alerts and software metrics</style>