During the Metricon 1.0 rump session, Andy Ozment gave an abbreviated presentation of the following paper:

Andy Ozment and Stuart E. Schechter. "Milk or Wine: Does Software Security Improve with Age?" In the proceedings of The Fifteenth Usenix Security Symposium. July 31 - August 4 2006: Vancouver, BC, Canada. [pdf]