Dense in Depth: Rethinking Security When Vulns Are Everywhere

The author argues that software vulnerabilities are dense rather than sparse, meaning finding and fixing individual bugs does little to lower the total volume of remaining flaws. Examining data from Google Chrome and AI-assisted scanning, the post concludes that vulnerabilities stem exponentially from execution paths and program states rather than lines of code. Consequently, the infosec industry should shift from a find-and-fix approach to building systemic mechanisms that eliminate entire families of vulnerabilities. Open article →