determining whether it is it possible to make a direct correlation between
the number and severity of detected vulnerabilities and bugs and the
complexity of the code that contains them.
u Security Scoring Vector (S-vector) for Web Applications—[128] Under