Can You Test Security?
"Traditionally: no
Trying to test the negative proposition that “this software won’t do anything funny under arbitrary input”, I.e. no surprising “something else’s”
"Relative Vulnerability transforms this into a positive proposition:
Candidate security enhancing software stops at least foo% of unanticipated vulnerabilities over time