possible to pinpoint the fraction of overall software defects with security
implications (i.e., those that are vulnerabilities). From this analysis, they
produced a “vulnerability discovery rate” metric. Based on this metric, i.e.,
the quantity of discovered vulnerabilities, they are now attempting to