In this article you can learn that it takes the same amount of effort to verify if a security hole is real, as it takes to find it in the first place. (?)