will, in fact, prove to be secure “in the wild” (i.e., in deployment).
Both the information security and the software engineering communities
appearto be looking at the problem of defining meaningful metrics for measuring
the security of software.The metrics they are researching are based on existing