other comparable software (operating under the same or different conditions).
Along the lines of Epstein’s suggestion, i.e., to gather statistics that one
knows can be gathered, then to consider them in terms of their indications
for software security, quite a bit of the software security metrics work to date