  All computer programs have flaws, some of which can be exploited to gain
unauthorized access to computer systems. We conducted a field study on publicly
reported vulnerabilities affecting three open source software projects in
widespread use. This paper highlights the main observations and conclusions
from the field data collected in the study.
