In 1996, a year after publishing his own A Taxonomy of Unix System and
Network Vulnerabilities in May 1995, [22] Matthew Bishop and his colleague
D. Bailey at the University of California at Davis published A Critical Analysis
of Vulnerability Taxonomies. [23] This document was one of the first attempts