I am not sure you can do such comparisons on the security of programming languages, and on the efficiency of auditing tools. For example how much of this difference is due to the code auditing people not catching all Java flaws? How do you measure the efficiency of a code audit? If you find 70 flaws...

[ more ]