A Security Practices Evaluation Framework
Source Lines of Code (SLOC)
“Measuring programming progress by lines of code is like measuring aircraft building progress by weight.” - Bill Gates
Description
Lines of Code is one of the oldest, and most controversial, software metrics. We use it as a means for assessing software size, and as a proxy for more detailed measures such as complexity. Broadly speaking, larger code size may indicate the potential for software defects, including vulnerabilities.
Definition
Number of non-blank, non-comment lines present in the release of the software being working on during the current project.
Data Collection
Count total number of non-blank, non-comment lines present in the release of the software being working on during the current project.