Open-Source and its Effects on Security - Marc Ruef (2011)