"Quantifying the Attack Surface of a Web Application." In ISSE/Sicherheit 2010: Information Security Solutions Europe - Sicherheit, Lecture Notes in Informatics (LNI), 305-316. Vol. P-170. Bonner Köllen: Verlag, 2010.