Measuring, analyzing and predicting security vulnerabilities in software systems