The ugly truth

  1. All non-trivial software has bugs

  2. Some of these bugs are exploitable

-> Code audits