EuroSec SQOOSS
From Istlab
Summary
With SQO-OSS in mind, we'll try and introduce some new metrics that will measure software vulnurabilities in Java.
Contribution
1. A fresh taxonomy of Java vulnerabilities (dimitro, circular).
http://www.cigital.com/securitypack/view/index.html
http://www.sei.cmu.edu/pub/documents/05.reports/pdf/05tn044.pdf
2. A Plugin to detect them (bkarak).
A SQO-OSS plugin
3. Measurements (gousiosg).