Dave Aitel responds to APEG paper

Jeremiah Grossman posted a link to a Security Focus article written by Dave Aitel, respected security guru and founder/CTO of Immunity. In the article, Dave responds to the recent paper on automatic patch-based exploit generation. The gist of his article is that their paper, while highlighting some known issues in the patch process, is full of crap, and the authors seriously misunderstand the difference between an exploit and proof of concept. He goes on to argue that there is a significant disparity between academia and (real world) security/vulnerability research. Quite an interesting read -- Dave brings up some very good points.