Security of open source web applications

In an empirical study of fourteen widely used open source PHP web applications, we found that the vulnerability density of the aggregate code base decreased from 8.88 vulnerabilities/KLOC to 3.30 from Summer 2006 to Summer 2008. Individual web applications varied widely, with

• Type: Journal
• Year: 2009
• Where: ESEM
• Authors: James Walden, Maureen Doyle, Grant A. Welch, Michael Whelan
• Keywords: Aggregate Code Base, ESEM 2009, Open Source Php, Software Engineering, Web Applications