18. The method of claim 14 , wherein comparing comprises comparing numbers of vulnerabilities per line of code.
14. A method for security analysis, comprising: training a classifier, comprising: running an initial security analysis on a training codebase to generate a set of vulnerabilities associated with the training codebase; analyzing a program with a feature set that limits a number of detected vulnerabilities to generate a limited set of vulnerabilities associated with the feature set; comparing the limited set of vulnerabilities to a known vulnerability distribution to generate an accuracy score using a processor; iterating said steps of analyzing and comparing using different feature sets to find a feature set having a highest accuracy score; and generating a classifier based on the feature set having the highest accuracy score; and scanning code using the classifier to locate potential vulnerabilities.