01501nas a2200121   4500008004100000022001400041245003600055210003300091260004200124520116000166100001701326856003601343       2008                        eng d  a1913-610200aEditorial: Security (June 2008)0 aEditorial Security June 2008  aOttawabTalent First Networkc06/20083 aIf you google the phrase "open source security", you'll find plenty of articles which debunk the "myth" of open source security, fuel the debate of Linus' law vs. security through obscurity, or argue which type of software, proprietary or open source, is more secure. Yet, the question "which type of software is more secure?" is impossible to answer. Software security is highly dependent upon many variables: the programming language used, the practices implemented by the individual programmers, the processes imposed by the specific organization overseeing the programmers, and the configuration of the software by a particular end-user.

This issue of the OSBR examines several facets of open source security. Jake Kouns from the Open Security Foundation introduces an open source project which manages a global collection of vulnerabilities, available for free use by the information security community. David Maxwell from the Coverity Scan project discusses their report on code defect trends from an analysis of several hundred open source projects, representing 55 million lines of code, through 14,000 build sessions over a two year period. 
1 aLavigne, Dru  uhttp://timreview.ca/article/154