Others have pointed out some errors with the methods employed in this report.
Still, who else is collecting this kind and fidelity of data? I found the trends very informative. First that we're still a long long way from having hardened base operating systems, but also that the trend is positive and slowly moving in the right direction.
Even just getting a breakdown of CVEs is interesting (though I would have liked better granularity than "bypass something") for both trends and to understand just how many DoS issues come up per year versus say code injections or overflows.
Still, who else is collecting this kind and fidelity of data? I found the trends very informative. First that we're still a long long way from having hardened base operating systems, but also that the trend is positive and slowly moving in the right direction.
Even just getting a breakdown of CVEs is interesting (though I would have liked better granularity than "bypass something") for both trends and to understand just how many DoS issues come up per year versus say code injections or overflows.