WebApp Sec mailing list archives

Re: Code Complexity vs. Security


From: Gunnar Peterson <gunnar () arctecgroup net>
Date: Fri, 23 Jul 2004 21:25:20 +0000

Dan Geer's Blackhat Windows keynote talk last January charted lines of code 
against vulnerabilities over time. LOC is not complexity per se, but it is an 
indicator.

Quoting Mark Curphey <mark () curphey com>:

Has anyone seen any good studies that analytically compare the security
quality of code to code complexity ?


Current thread: