"open-source analysis", e.g. finding a vulnerability in an open-source project like wordpress or rails? That sounds really hard :)