Security metrics: Is there a better way?

TalkBack 1 of 14:

Next »

• Thread View
• Flat View

Open Source vs. Closed Source

Unfortunately, the biggest problem here is open source vs. closed source. Here's the deal, it's easier to find bugs in open source apps, as you can see the source. On top of that, closed source (Windows) often means closed door policy on vuln. disclosures. Microsoft hires some of the best and brightest to help with their security initiative, you have to imagine that they are finding a lot of flaws, and those flaws do not get released to the public.

The comparison that Jones makes is flawed. I'm not sure there is a good way to track metrics between open and closed source softwares.

Posted by: nmcfeters   Posted on: 01/25/08 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• Why Isn't Server Virtualization Saving Us More? A Few Small Changes May Dramatically Increase Your Efficiency VMware Companies have rapidly adopted server virtualization over the past few ... Download Now
• Open Standards Technologies Provide the Ingredients for Delivering Security Across the Papa Gino's Enterprise Dell Papa Gino's Holdings Corporation founded by the entrepreneur operates one ... Download Now
• Building the Virtualized Enterprise with VMware Infrastructure VMware VMware virtualization software has been adopted by over 120,000 enterprise ... Download Now