A Security Practices Evaluation Framework

Vulnerability Density


Description

Vulnerability Density (Vdensity) is the cumulative vulnerability count per unit size of code. We adopt a size unit of thousand source lines of code (KSLOC).

Definition

Total Vulnerabilities divided by number of KSLOC in the software, at a point in time.

Data Collection

Derived from Pre- and Post-Release Vulnerabilities and SLOC metrics.