Does open source improve system security?

Abstract

This work addresses the question to whether making source code freely available for security review, and potentially repair, is more likely to improve or degrade system security. It is shown that revealing a system's source code is not just a technical act. It has economic and other effects that must be considered.