Jeroen van der Ham-de Vos

The paper provides a formal proof that a single C program can contain a countably infinite number of distinct, independently assignable software vulnerabilities, suggesting the set of all software vulnerabilities is infinite.

The paper empirically studies the security controls of top domain registrars for the .nl ccTLD, finding that while they implement effective measures, they lack advanced controls like proper two-factor authentication, and that domain takeovers pose a risk comparable to ransomware.