with Bellovin that absolute security of software is probably not possible, [120]
but disagreed that it was impossible to collect some combination of statistics
about software—measurements that are already being taken—and then to
determine which of these metrics (alone or in combination with others)