Number of security flaws

[Humpty]

This relates to many different applications.

 

Most vulnerabilities in applications never see the light of day, according to security expert.

 

While the number of reported security vulnerabilities was around 7,200 last year, the actual figure could be as high as 140,000, according to an expert.

 

Gunter Ollmann, director of security strategy at IBM's security subsidiary ISS, said that while 7,247 flaws were publicly disclosed in 2006 and over 2,500 were discovered so far this year, many more will escape the attention of most of us.

 

Ollmann reckoned that 125,000 flaws per year never saw the light of day as they were found by penetration testers working under contract to organisations.

Article