Source-based software risk assessment | IEEE Conference Publication | IEEE Xplore